A framework for understanding and assessing the core capability of a digital forensics organisation

Abstract

This research proposes a framework to better understand the building and managing of a digital forensics organisation’s capability. The research uses the Straussian Grounded Theory methodology to arrive at the proposed theoretical framework, which is grounded in the data. The framework is also grounded in existing literature on digital forensics capability by examining literature in digital forensics readiness, the capability maturity model, the digital forensics management framework, and best practices in building and managing a digital forensics lab. The proposed framework, called the Digital Forensics Core Capability Framework, offers a definition for what constitutes capability for a digital forensics organisation.

Document Type

Conference Proceeding

Date of Publication

2016

Location of the Work

Heidelberg, Germany

Publication Title

Proceedings of the Twelfth Annual IFIP WG 11.9 International Conference on Digital Forensics

Publisher

Springer International Publishing

School

Cyber Security Research Institute

RAS ID

22837

Comments

Almarzooqi, A., & Jones, A. (2016). A framework for understanding and assessing the core capability of a digital forensics organisation. In Proceedings of the Twelfth Annual IFIP WG 11.9 International Conference on Digital Forensics.

Available here.

Copyright

subscription content

Share

 
COinS