Digital Forensics Processing and Procedures

7.5.2.5 Procedures for Retrieving Calls

Where a call is to be retrieved either for a forensic case by an authorized Forensic Laboratory employee or an authorized third party working for the Forensic Laboratory, or for any other call.

1. An authorized Forensic Laboratory Line Manager sends a request to the IT Manager and the Information Security Manager to retrieve a call. The request should include:

• time of call;

• telephone extension;

• justification;

• authorization.

2. The IT Manager logs on to the voice recording system or the ERMS, as appropriate, copies the file, and sends it to the requester.

3. If the call contains disclosure of confidential or strictly confidential information or it shows misbehavior from a Forensic Laboratory ...