Examining the state of preparedness of information technology management in New Zealand for events that may require forensic analysis
Quinn, K J Spike
Computer security is of concern to those in IT (Information Technology) and forensic readiness (being prepared to deal effectively with events that may require forensic investigation) is a growing issue. Data held only on magnetic or other transient media require expert knowledge and special procedures to preserve and present it as valid in a criminal or employment court. Staff required to handle possible forensic evidence should be forensically knowledgeable. Having policies and procedures in place is one inexpensive way to protect the forensic data and can mean the difference between a valid case and no case. This paper presents the results of a survey of IT managers in New Zealand (NZ) examining the state of awareness of IT management in NZ regarding the field of digital forensics in general and their state of preparation for protection of forensic data in the case of an event requiring forensic analysis.
Keywords: security policy; forensic policy; IT management; forensic readiness; statistics
Research Type: Journal Article
This is a post-print of the paper (i.e., draft post-refereeing). There may be small differences between this version and the final published version; please refer to the publisher's web site for the final published version.