Previous article in series – Digital Forensics: Challenges & Recommendations
What is E-Discovery?
Electronic discovery (e-discovery) is the identification, preservation, collection, processing, review, analysis, or production of electronically stored information.
Often it is the support mechanism and the impetus for investigations, data acquisition, and insight-driven initiatives.
To properly manage e-discovery a multidisciplinary team needs to bring together the efforts of trained technical and nontechnical personnel. Close attention needs to be paid to the jurisdictional regime of wherever e-discovery efforts are taken.
Why is it needed?
E-Discovery is essential in any of the following situations –
- Crime investigation
- Internal policy violation
- Recovery from accidental damage
- Legal hold advisories/orders
- Compliance/law/regulations
For more information on e-discovery, review ISO/IEC 27050 Information technology – Security techniques – Electronic discovery –
- Part 1: Overview and concepts
- Part 2: Guidance for governance and management of electronic discovery
- Part 3: Code of practice for electronic discovery
Next article in series – Digital Forensics: Preparing for a Legal Hold
2 thoughts on “Digital Forensics: E-Discovery”