A framework for understanding and assessing the core capability of a digital forensics organisation
Proceedings of the Twelfth Annual IFIP WG 11.9 International Conference on Digital Forensics
Springer International Publishing
Place of Publication
Cyber Security Research Institute
This research proposes a framework to better understand the building and managing of a digital forensics organisation’s capability. The research uses the Straussian Grounded Theory methodology to arrive at the proposed theoretical framework, which is grounded in the data. The framework is also grounded in existing literature on digital forensics capability by examining literature in digital forensics readiness, the capability maturity model, the digital forensics management framework, and best practices in building and managing a digital forensics lab. The proposed framework, called the Digital Forensics Core Capability Framework, offers a definition for what constitutes capability for a digital forensics organisation.