BS EN ISO/IEC 27037:2016
Current
The latest, up-to-date edition.
Information technology. Security techniques. Guidelines for identification, collection, acquisition and preservation of digital evidence
Hardcopy , PDF
English
31-10-2016
Foreword
Introduction
1 Scope
2 Normative reference
3 Terms and definitions
4 Abbreviated terms
5 Overview
6 Key components of identification, collection,
acquisition and preservation of digital evidence
7 Instances of identification, collection, acquisition
and preservation
Annex A (informative) - DEFR core skills and competency
description
Annex B (informative) - Minimum documentation requirements
for evidence transfer
Bibliography
Specifies guidelines for specific activities in handling digital evidence, which are identification, collection, acquisition and preservation of digital evidence that may be of evidential value.
Committee |
IST/33/4
|
DevelopmentNote |
Supersedes 11/30207799 DC. Renumbers and supersedes BS ISO/IEC 27037. 2016 version incorporates corrigendum to BS ISO/IEC 27037. (10/2016)
|
DocumentType |
Standard
|
Pages |
52
|
PublisherName |
British Standards Institution
|
Status |
Current
|
Supersedes |
This International Standard provides guidelines for specific activities in handling digital evidence, which are identification, collection, acquisition and preservation of digital evidence that may be of evidential value. This International Standard provides guidance to individuals with respect to common situations encountered throughout the digital evidence handling process and assists organizations in their disciplinary procedures and in facilitating the exchange of potential digital evidence between jurisdictions. This International Standard gives guidance for the following devices and/or functions that are used in various circumstances: Digital storage media used in standard computers like hard drives, floppy disks, optical and magneto optical disks, data devices with similar functions, Mobile phones, Personal Digital Assistants (PDAs), Personal Electronic Devices (PEDs), memory cards, Mobile navigation systems, Digital still and video cameras (including CCTV), Standard computer with network connections, Networks based on TCP/IP and other digital protocols, and Devices with similar functions as above. NOTE1 The above list of devices is an indicative list and not exhaustive. NOTE2 Circumstances include the above devices that exist in various forms. For example, an automotive system may include mobile navigation system, data storage and sensory system.
Standards | Relationship |
EN ISO/IEC 27037:2016 | Identical |
ISO/IEC 27037:2012 | Identical |
ISO/IEC 17025:2005 | General requirements for the competence of testing and calibration laboratories |
ISO/IEC 27001:2013 | Information technology — Security techniques — Information security management systems — Requirements |
ISO/IEC 27035:2011 | Information technology Security techniques Information security incident management |
ISO/IEC 27031:2011 | Information technology — Security techniques — Guidelines for information and communication technology readiness for business continuity |
ISO/IEC 24760-1:2011 | Information technology Security techniques A framework for identity management Part 1: Terminology and concepts |
ISO/IEC 27002:2013 | Information technology Security techniques Code of practice for information security controls |
ISO/IEC 17020:2012 | Conformity assessment — Requirements for the operation of various types of bodies performing inspection |
ISO/IEC 17043:2010 | Conformity assessment — General requirements for proficiency testing |
ISO/IEC 17024:2012 | Conformity assessment — General requirements for bodies operating certification of persons |
ISO/TR 15801:2017 | Document management — Electronically stored information — Recommendations for trustworthiness and reliability |
ISO/IEC 27000:2016 | Information technology Security techniques Information security management systems Overview and vocabulary |
Access your standards online with a subscription
Features
-
Simple online access to standards, technical information and regulations.
-
Critical updates of standards and customisable alerts and notifications.
-
Multi-user online standards collection: secure, flexible and cost effective.