Virtualization and Forensics

8 Virtual Environments and Compliance

Information in This Chapter

• • Standards
• • Compliance
• • Organizational Chain of Custody
• • Data Retention Policies

Due to the nature of personal information, there are certain regulatory compliance requirements for many types of businesses. If the organization is required to maintain certain data for a set period of time based on regulations or policy, any information contained in virtual environments must be considered. If the organization is using virtual machines (VMs), this will need to be addressed in the security policy.

Standards

In late 2007, the Distributed Management Task Force, Inc. (DMTF) created an open standard for system virtualization management. According to Winston Bumpus, the current ...