Friday, December 5, 2008

Businesses urged to devise digital-forensics plans

"Unless the organisation has developed a detailed planned response to typical risk scenarios, much potential evidence will never be collected or will become worthless as a result of contamination," wrote Sommer, a visiting professor for the London School of Economics. "What is needed is a forensic readiness plan."

Businesses should first identify the threats faced by their organisation that may require digital forensic evidence. Firms should then identify to what extent they can already collect that evidence, and what remains to be done. Once organisations have familiarised themselves with potential legal issues — including admissibility, data protection and limits to surveillance — an action plan should be produced, wrote Sommer.

Read more from ZDNet.co.uk

Read the Guide to Digital Investigations and Evidence

0 comments: