Article about ISO s...
 
Notifications
Clear all

Article about ISO standards and computer forensics

6 Posts
3 Users
0 Reactions
379 Views
(@peppespe)
Active Member
Joined: 16 years ago
Posts: 6
Topic starter  

Today I read the article about the standards ISO and computer
forensics on http//www.forensicfocus.com/simon-biles.
In the matter of this argument, I would highlight that there
is an important standard that face the arduous problem of preservation
of digital evidences, this standard is the ISO 27037 - "Guidelines for
identification, collection and/or acquisition and preservation of
digital evidence."
Pardon for my broken english 😉


   
Quote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

Is it actually a standard or is it WD as mentioned here?
http//www.iso27001security.com/html/27037.html

JFYI, and as a general opinion, I think that standards should ALL be publicly available, the scope of them being that of certifying something to "protect" the procedure and the parts involved.

jaclaz


   
ReplyQuote
(@peppespe)
Active Member
Joined: 16 years ago
Posts: 6
Topic starter  

As far as I know, the ISO 27037 is still a draft, but my laboratory already use this standard for two years.
According to me the ISO 27037 isn't comprehensive about the mobile devices and it must be contextualize in the italian legislative body.


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

So, sorry if I seem picky, mainly because I am picky wink

  • there is NO such standard
  • there is a draft of it
  • your laboratory adopted since two years this draft that however needs to be "contextualized" to local Laws

With all due respect for you and your laboratory, the above equates to

my laboratory uses its own internal procedures, loosely based on a two years old draft of a yet to be approved standard, modified in order to be coherent with Italian Law

which is of course a good thing ) , but unless proven wrong, to me a "to be contextualized draft of a standard" is really a NON-standard.

As you might well know, there is a nice saying among technical engineers

I love standards, there are so many of them… 8)

Throwing on the table drafts too, might be a little premature….

jaclaz


   
ReplyQuote
(@peppespe)
Active Member
Joined: 16 years ago
Posts: 6
Topic starter  

First of all I'm sorry for my broken english 😉 , but I believe that is necessary regard this draft of standard because the activity of preservation is the first step to consider from which depends the result of a long series of activities that compose a digital investigation.


   
ReplyQuote
(@mindsmith)
Estimable Member
Joined: 20 years ago
Posts: 174
 

Hi,

I hve been trying to get a copy of the draft ISO 27037 for soemtime. I have read the hardcopy & need a softcopy - can anyone assist?

Thanks & Regards,


   
ReplyQuote
Share: