ISO/IEC 27050 - Electronic Discovery (Parts 1-4)

International (ISO/IEC)

v2019-2021

8 domains

29 controls

ISO/IEC 27050 (Parts 1-4) provides guidance on activities related to electronic discovery (eDiscovery) - the process of identifying, preserving, collecting, processing, reviewing, and producing electronically stored information (ESI) in litigation, investigations, and regulatory matters. Part 1 covers overview, Part 2 governance and management, Part 3 code of practice, and Part 4 technical readiness. Aligns with the EDRM (Electronic Discovery Reference Model).

Unverified

ISO/IEC 27050 - Electronic Discovery (Parts 1-4) is a compliance framework from International (ISO/IEC) with 8 domains and 29 controls that map to 5 other frameworks. The largest domains are Part 3 Procedures (7 controls), Part 4 ICT Readiness (5 controls), Part 1: Overview and Concepts (ISO/IEC 27050-1:2019) (4 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (8)

Part 1 Overview

2 controls

Controls in the Part 1 Overview domain of ISO/IEC 27050 - Electronic Discovery (Parts 1-4) — 2 controls
Code	Title	Description
27050-1.1	eDiscovery Scope and Terminology	Define the scope and terminology for electronic discovery activities within the organisation, aligned with ISO/IEC 27050...
27050-1.2	ESI Lifecycle Overview	Document the electronically stored information lifecycle from identification through presentation, mapping each stage to...

Part 1: Overview and Concepts (ISO/IEC 27050-1:2019)

4 controls

Controls in the Part 1: Overview and Concepts (ISO/IEC 27050-1:2019) domain of ISO/IEC 27050 - Electronic Discovery (Parts 1-4) — 3 controls
Code	Title	Description
27050-1.5	Overview of electronic discovery	General overview of the electronic discovery process and its importance in legal proceedings
27050-1.6	Electronic discovery process elements	Description of identification, preservation, collection, processing, review, analysis, and production of ESI
27050-1.7	Electronically stored information	Common ESI types, common sources, and characteristics of electronically stored information

Part 2 Governance

3 controls

Controls in the Part 2 Governance domain of ISO/IEC 27050 - Electronic Discovery (Parts 1-4) — 3 controls
Code	Title	Description
27050-2.1	eDiscovery Governance Framework	Establish a governance framework for eDiscovery covering accountability, policy and integration with legal, compliance a...
27050-2.2	Roles and Responsibilities	Define eDiscovery roles including legal counsel, eDiscovery project manager, IT, records management, custodians and exte...
27050-2.3	Risk Management for eDiscovery	Identify, assess and treat risks specific to eDiscovery including spoliation, privilege waiver, data privacy and chain o...

Part 2: Guidance for Governance and Management (ISO/IEC 27050-2:2018)

4 controls

Controls in the Part 2: Guidance for Governance and Management (ISO/IEC 27050-2:2018) domain of ISO/IEC 27050 - Electronic Discovery (Parts 1-4) — 4 controls
Code	Title	Description
27050-2.4	Policies and Procedures	Maintain documented policies and procedures for legal holds, preservation, collection, processing, review and production...
27050-2.5	Policy and compliance	Setting electronic discovery policy and achieving compliance with external and internal requirements
27050-2.6	Risk ownership and management	Identifying risks related to electronic discovery and establishing ownership and accountability
27050-2.7	Records management integration	Integrating electronic discovery governance with organizational records management practices

Part 3 Procedures

7 controls

Controls in the Part 3 Procedures domain of ISO/IEC 27050 - Electronic Discovery (Parts 1-4) — 7 controls
Code	Title	Description
27050-3.1	Identification of ESI	Identify potentially relevant ESI sources, custodians and locations at the start of a matter using documented procedures...
27050-3.2	Preservation of ESI	Preserve identified ESI through legal holds, suspension of routine deletion and protection of metadata and chain of cust...
27050-3.3	Collection of ESI	Collect ESI using forensically defensible methods that preserve metadata and chain of custody, documented in collection...
27050-3.4	Processing of ESI	Process collected ESI to extract text, normalise formats, deduplicate and prepare for review while maintaining defensibi...
27050-3.5	Review and Analysis	Review processed ESI for relevance, privilege and confidentiality using defensible workflows including technology-assist...
27050-3.6	Production of ESI	Produce reviewed ESI in agreed formats with appropriate redactions, load files and production logs.
27050-3.7	Presentation of ESI	Prepare and present ESI in proceedings with appropriate authentication, demonstratives and witness preparation.

Part 3: Code of Practice (ISO/IEC 27050-3:2020)

2 controls

Controls in the Part 3: Code of Practice (ISO/IEC 27050-3:2020) domain of ISO/IEC 27050 - Electronic Discovery (Parts 1-4) — 2 controls
Code	Title	Description
27050-3.8	Review, analysis, and production	Requirements for reviewing, analyzing, and producing ESI in response to discovery obligations
27050-3.9	ESI lifecycle management	Requirements spanning the lifecycle of ESI from initial creation through final disposition

Part 4 ICT Readiness

5 controls

Controls in the Part 4 ICT Readiness domain of ISO/IEC 27050 - Electronic Discovery (Parts 1-4) — 5 controls
Code	Title	Description
27050-4.1	ICT Readiness Assessment for eDiscovery	Assess organisational ICT readiness to support eDiscovery activities efficiently and defensibly.
27050-4.2	Data Map and Inventory	Maintain an enterprise data map covering all repositories that may contain potentially responsive ESI.
27050-4.3	Retention and Disposition	Implement retention schedules and disposition controls that align with eDiscovery obligations, including legal hold susp...
27050-4.4	Tools and Technology	Select, validate and maintain tools used for eDiscovery activities including preservation, collection, processing and re...
27050-4.5	Cloud and SaaS Considerations	Address eDiscovery challenges introduced by cloud and SaaS including data location, provider cooperation and export limi...

Part 4: Technical Readiness (ISO/IEC 27050-4:2021)

2 controls

Controls in the Part 4: Technical Readiness (ISO/IEC 27050-4:2021) domain of ISO/IEC 27050 - Electronic Discovery (Parts 1-4) — 2 controls
Code	Title	Description
27050-4.6	Proactive measures	Proactive measures that organizations can implement to enable effective and appropriate electronic discovery
27050-4.7	Technical infrastructure	Guidance on technical infrastructure requirements for collection, processing, and review tools

Your Compliance Coverage

If you comply with ISO/IEC 27050 - Electronic Discovery (Parts 1-4), you already cover:

ISO 9001:2015

1 controls mapped

Compare →

ISO 13485:2016

1 controls mapped

Compare →

ISO/IEC 42001:2023

1 controls mapped

Compare →

+ 2 more: ISO 37001:2016 (4%), ISO 37301:2021 (4%)

See all 5 mapped frameworks ↓