A framework for understanding and assessing the core capability of a digital forensics organisation

Authors/Creators

Ahmed Almarzooqi
Andrew Jones, Edith Cowan UniversityFollow

Abstract

This research proposes a framework to better understand the building and managing of a digital forensics organisation’s capability. The research uses the Straussian Grounded Theory methodology to arrive at the proposed theoretical framework, which is grounded in the data. The framework is also grounded in existing literature on digital forensics capability by examining literature in digital forensics readiness, the capability maturity model, the digital forensics management framework, and best practices in building and managing a digital forensics lab. The proposed framework, called the Digital Forensics Core Capability Framework, offers a definition for what constitutes capability for a digital forensics organisation.

RAS ID

22837

Document Type

Conference Proceeding

Date of Publication

2016

Location of the Work

Heidelberg, Germany

School

Cyber Security Research Institute

Copyright

subscription content

Publisher

Springer International Publishing

Comments

Almarzooqi, A., & Jones, A. (2016). A framework for understanding and assessing the core capability of a digital forensics organisation. In Proceedings of the Twelfth Annual IFIP WG 11.9 International Conference on Digital Forensics.

Available here.

Recommended Citation

Almarzooqi, A., & Jones, A. (2016). A framework for understanding and assessing the core capability of a digital forensics organisation. Retrieved from https://ro.ecu.edu.au/ecuworkspost2013/5420