ISO/IEC 27037:2012
Clause 5: Overview, principles and handling processes – ISO/IEC 27037:2012

ISO/IEC 27037:2012 5.1: 5.1 Context for collecting digital evidence

Evidence may be wanted for quite different purposes, and each weighs evidential quality, speed of analysis, getting services back and the cost of gathering differently. The organization therefore runs a prioritisation process before assigning first responders: it evaluates what material is available, judges its likely evidential value and sets the order in which items are collected, acquired or preserved, so that the chance of spoiling evidence is kept low and the value of what is gathered is as high as possible.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO/IEC 27043:2015 · 1 control

  • 8.4 8.4 Planning process

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Clause 5: Overview, principles and handling processes – ISO/IEC 27037:2012

Query this from an agent

The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.