ABSTRACT

The current chapter covers the domain of legal, regulations, compliance and investigation — formerly known as the law, investigation, and ethics domain. The legal, regulations, compliance and investigations domain addresses general computer crime legislation and regulations, the investigative measures and techniques that can be used to determine if an incident has occurred, and the gathering, analysis, and management of evidence if it exists. The focus is on concepts and international generally accepted methods, processes, and procedures. It is important to highlight the international focus at the very beginning. This chapter will avoid indepth discussions of country/regional specific laws, legislation, and regulations. Although some regional examples are presented to clarify certain discussion points, these will be limited to the emphasis of principles common across most, if not all, jurisdictions.