Chapter 13

Maintain Evidence-Based Reporting


Some objectives for executing any investigation is to use digital evidence as a means of answering questions about an incident or event and demonstrate credibility behind these answers. Supporting these requires organizations to follow a metrology by which their investigative reporting capability is based on the presentation of factual evidence-based conclusions.


Credibility; Exculpatory; Factual; Inculpatory; Reports
This chapter discusses the ninth step for implementing a digital forensic readiness program as the need to provide answers to questions that arise during the investigation and demonstrate, through evidence-based reporting, why those answers are credible. Ultimately, the purpose ...

Get Implementing Digital Forensic Readiness now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.