A Ten Step Process for Forensic Readiness.

摘要: A forensic investigation of digital evidence is commonly employed as a post-event response to serious information security incident. In fact, there are many circumstances where an organisation may benefit from ability gather and preserve before incident occurs. Forensic readiness defined the maximise its potential use whilst minimising costs investigation. The benefits such approach outlined. Preparation involve enhanced system staff monitoring, technical, physical procedural means secure data evidential standards admissibility, processes procedures ensure that recognise importance legal sensitivities evidence, appropriate advice interfacing with law enforcement. This paper proposes ten step process for implement readiness.