A framework for understanding and assessing the core capability of a digital forensics organisation

Document Type

Conference Proceeding

Publication Title

Proceedings of the Twelfth Annual IFIP WG 11.9 International Conference on Digital Forensics

Publisher

Springer International Publishing

Place of Publication

Heidelberg, Germany

School

Cyber Security Research Institute

RAS ID

22837

Comments

Almarzooqi, A., & Jones, A. (2016). A framework for understanding and assessing the core capability of a digital forensics organisation. In Proceedings of the Twelfth Annual IFIP WG 11.9 International Conference on Digital Forensics.

Available here.

Abstract

This research proposes a framework to better understand the building and managing of a digital forensics organisation’s capability. The research uses the Straussian Grounded Theory methodology to arrive at the proposed theoretical framework, which is grounded in the data. The framework is also grounded in existing literature on digital forensics capability by examining literature in digital forensics readiness, the capability maturity model, the digital forensics management framework, and best practices in building and managing a digital forensics lab. The proposed framework, called the Digital Forensics Core Capability Framework, offers a definition for what constitutes capability for a digital forensics organisation.

Access Rights

subscription content

Share

 
COinS