ISO/IEC 27042:2015
Clause 8: Interpretation – ISO/IEC 27042:2015

ISO/IEC 27042:2015 8.3: 8.3 Factors affecting interpretation

Interpretation depends on knowing how each item came to exist, which may need information from people who run the systems day to day; its reliability is tested and the probative weight given reflects it. The team also needs the investigation's purpose and the scope of its work, including the purpose and audience of the final report, and weighs the quality of the potential digital evidence (completeness, source, original purpose, possible obfuscation). The aim is an explanation of the facts within the context given; where more than one explanation is reasonable, the alternatives are reported too, interpretation is revisited if the context changes, and where facts support several interpretations, all or at least the more plausible ones are given with their likelihoods where possible.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO/IEC 27043:2015 · 1 control

  • 10.4 10.4 Digital evidence interpretation process

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Clause 8: Interpretation – ISO/IEC 27042:2015

Query this from an agent

The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.