ABSTRACT

Organizations exist in many different contexts (i.e., size, geography, industry) and within each there are different and unique requirements when it comes to digital forensics capabilities. There are some organizations that, given their operating model and corporate profile, leverage external managed services to supply a digital forensics team when required. The remaining organizations, have decided that having a digital forensics team in-house is the best strategy for given their operating model and corporate profile. After making this decision, the organization needs to kick-start their long-term digital forensics program by implementing a series of administrative, technical, and physical strategies.