Knowledge Base

ISO-27001-Annex-A.15.2-Supplier-Service-Delivery-Management

ISO 27001 Annex : A.15.2 Supplier Service Delivery Management

ISO 27001 Annex : A.15.2 Supplier Service Delivery Management It’s objective is to maintain, in compliance with supplier agreements, an agreed level of information security and delivery of service. A.15.2.1  Monitoring and Review of Supplier Services Control- Organizations shall monitor, review and audit the provision of service to suppliers on a regular basis. Implementation Guidance – Monitoring and review of supplier services will ensure respect for the terms and conditions of information security of the …

ISO 27001 Annex : A.15.2 Supplier Service Delivery Management Read More »

Duplicate-the-Data-&-Recover-Data-Lost

Duplicate the Data & Recover Data Lost

Duplicate the Data & Recover Data Lost this article explain in investigation evidence how should be duplicate data should be recover and which software are use for recovery data. Duplicate the Data (Imaging) Performing the investigation on the original evidence can misdirect the investigation to different results and could make the original evidence vulnerable. Data duplication is an important step in securing the original evidence. Investigating the original evidence can cause damage to the identity …

Duplicate the Data & Recover Data Lost Read More »

Understand-the-Chain-of-Custody-and-It’s-Importance

Understand the Chain of Custody and It’s Importance

Understand the Chain of Custody and It’s Importance In this Chain of custody is a legal document that demonstrates the progression of evidence as it travels from the original evidence location to the forensic laboratory. It is a roadmap that shows how investigators collected, analyzed, and preserved the evidence. The investigators need to present this document in court. It ensures accurate auditing of the original data evidence, imaging of the source media, tracking of the …

Understand the Chain of Custody and It’s Importance Read More »

ISO-27001-Annex-A.15.1.2-Addressing-Security-Within-Supplier-Agreements

ISO 27001 Annex : A.15.1.2 Addressing Security Within Supplier Agreements & A.15.1.3 Information and Communication Technology Supply Chain

In this article explain ISO 27001 Annex : A.15.1.2 Addressing Security Within Supplier Agreements & A.15.1.3 Information and Communication Technology Supply Chain this controls. A.15.1.2  Addressing Security Within Supplier Agreements Control- Any suppliers that view, process, store, communicate or provide IT infrastructure component information for the organization should be defined and agreed with all applicable information security requirements. Implementation Guidance- Supplier agreements should be defined and recorded so that the organization and the supplier do …

ISO 27001 Annex : A.15.1.2 Addressing Security Within Supplier Agreements & A.15.1.3 Information and Communication Technology Supply Chain Read More »

Declarant-Unavailable

Declarant Unavailable

Declarant Unavailable in this article explain principle for declarant unavailable and rules 1002,1003 and 1004. Following are the principles for Hearsay Exceptions; if Declarant is Unavailable 1. Definition of unavailability: Unavailability as a witness” includes situations during which the declarant: is exempted by ruling of the court on the bottom of privilege from testifying concerning the topic matter of the declarant’s statement; or persists in refusing to testify concerning the topic matter of the declarant’s …

Declarant Unavailable Read More »

Rules-of-Evidence

Rules of Evidence

In Rules of Evidence prior to the investigation, it’s important for the investigator to know the principles of evidence. The submission of evidence during a proceeding , especially in computer crime cases, can have major challenges. Specific knowledge is required to gather , preserve, and transport the evidence because the evidence obtained from a cybercrime case might vary from the normal sorts of evidence. Often, evidence related to computer crimes is within the sort of …

Rules of Evidence Read More »

ISO 27001 Annex : A.15 Supplier Relationships

ISO 27001 Annex : A.15 Supplier Relationships in this article explaining Information Security in Supplier Relationships, and there policies . A.15.1  Information Security in Supplier Relationships It’s objective is ensuring the security of assets accessible to suppliers of the organization. A.15.1.1  Information Security Policy for Supplier Relationships Control- The supplier should be agreed with and documented information security requirements related to the risk mitigation of access by suppliers to organizational assets. “The company becomes more …

ISO 27001 Annex : A.15 Supplier Relationships Read More »

Planning-the-Search-and-Seizure-of-investigation

Planning the Search and Seizure of investigation

Planning the Search and Seizure of investigation in this investigators need to design a strategic process to conduct the search and seizure process after analyzing the crime scene. This will help them distribute tasks between the team members to complete the seizure and allow the team to use time and tools in a well-defined manner. Initial Search of the Scene Once the forensic team has arrived at the scene and unloaded their equipment, they will …

Planning the Search and Seizure of investigation Read More »

Review-Policies-and-Laws-of-Forensic-Investigation

Review Policies and Laws of Forensic Investigation

Review Policies and Laws of Forensic Investigation it is essential to be aware of the laws that will be applicable to the investigation, including the organization’s internal policies, before starting the investigation process. Identify possible concerns related to applicable federal statutes, state statutes, and local policies and laws. Applicable federal statutes include the Electronic Communications Privacy Act of 1986 (ECPA) and the Cable Communications Policy Act (CCPA), both as amended by the USA PATRIOT ACT …

Review Policies and Laws of Forensic Investigation Read More »

Build-the-Investigation-Team

Build the Investigation Team

To Build the Investigation Team plays a major role in solving a case. The team is responsible for evaluating the crime, evidence, and criminals. Every team member should be assigned a few specific tasks (roles and responsibilities) that let the team analyze the incident easily. The guidelines for building the investigation team are as follows: Determine the person who has to respond to an incident so that a proper internal computer investigation can be performed …

Build the Investigation Team Read More »