BS ISO/IEC 30121:2015 pdf download-Information technology — Governance of digital forensic risk framework.
4 Principles 4.1 Responsibility Individuals and groups within the organization understand and accept their responsibilities in respect of both supply of, and demand for digital evidence. Those with responsibility for investigations also have the skill, independence and authority to perform those actions. 4.2 Strategy The organization’s strategy development takes into account the current and future retention, availability, access to and cost effectiveness of digital evidence; the strategic plans for evidential capability satisfy the current and ongoing needs of the organization. 4.3 Acquisition IT asset acquisitions are made to support the organization’s strategies, on the basis of appropriate and ongoing analysis, with clear and transparent decision making. There is appropriate balance between benefits, opportunities, costs, and risks, in both the short term and the long term. 4.4 Performance IT is fit for purpose in supporting the organization, providing the services, levels of service and service quality required to meet current and future organization digital evidence requirements. 4.5 Conformance IT assets comply with all mandatory legislation and regulations. Policies and practices are clearly defined, implemented and enforced in accordance with the organization’s risk criteria. 4.6 Human behaviour Digital forensic policies, practices and decisions demonstrate respect for human behaviour, including the current and evolving needs of all the people in the organization’s processes. 5 The framework 5.1 Stakeholder mandate The Governing body should be constituted to represent the stakeholders, is to have the authority to set the strategic direction of the organization, and should establish the capabilities to function. 5.2 Establishment The work cycle of the Governing body should be aligned with the tasks of Evaluate – Direct – Monitor; and to facilitate the adoption of strategic policy, strategic planning and strategic capability.
5.4 Direct The Governing body should assign responsibility for, and direct preparation and implementation of strategies, plans and policies. Plans should set the strategic direction for digital evidence, IT operations and capabilities. Governing bodies should encourage a culture of good governance of IT in their organization by requiring managers to provide timely information, to comply with strategic directions and to conform to the risk criteria. 5.5 Monitor The Governing body should monitor, through appropriate measurement systems, the performance and conformance of IT systems for digital evidence. They should reassure themselves that performance is in accordance with strategic plans and its levels of risk are within the organization’s risk criteria. Responsibility for the effective, efficient and acceptable use of IT for evidential purposes by an organization, remains with the Governing body and cannot be delegated.