IT Governance, Risk, and Compliance

Aug 17 2009   8:26PM GMT

Preserving Electronically Encoded Evidence – Part IV

Robert Davis Robert Davis Profile: Robert Davis

Whether target data is in transit or at rest, it is critical that measures are in place to prevent the sought information from being destroyed, corrupted or becoming unavailable for forensic investigation. When evidence is at rest, adequate procedures should be followed to ensure evidential non-repudiation. Volatile data capture assists investigators in determining the system state during the incident or event. Consequently, the utilization of functionally sound imaging software and practices are essential to maintaining evidential continuity.

View Part I of the Preserving Electronically Encoded Evidence series here

Post Note: An expanded version of this blog entry is available through the ISACA Journal.

 Comment on this Post

There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when other members comment.

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

Share this item with your network: