Implementing Digital Forensic Readiness

Introduction

Regardless of how strong an organization defenses, there will come a time when the weakest link is exposed leading to some type of incident. When that time comes, organizations turn to the highly specialized skills of digital forensic investigators to parse through and extract evidence from the complex volumes of data.

Unfortunately, there are times when an incident occurs and organizations are unable to support the digital investigation process with the electronic data needed to conduct analysis and arrive at credible and factual conclusions. Not only does this slow down the digital investigation process, it also places additional overhead on people and system to reactively identify where relevant electronic data is and work to have ...