Computer and Information Security Handbook, 3rd Edition

Chapter 42: Securing E-Discovery

Review Questions/Exercises

True/False

1. False

2. False

3. True

4. True

5. False

Multiple Choice

1. D

2. D

3. C

4. A

5. D

Exercise

Solution

The following is a partial exercise solution. The students should be able to expand on the following:

Although internal IT staff are often highly knowledgeable regarding their working environment and the technology employed within, computer forensic investigations are best performed by outside experts. Specifically, the nature of the forensic analysis process coupled with the requirements by law enforcement agencies and the court system necessitates that computer forensic investigations are performed by external entities equipped with authorized forensic technology and trained to observe forensic ...