
Information technology - Security techniques - Incident investigation principles and processes
NORM herausgegeben am 4.3.2015
Designation standards: ISO/IEC 27043-ed.1.0
Publication date standards: 4.3.2015
The number of pages: 30
Approximate weight : 90 g (0.20 lbs)
Country: International technical standard
Kategorie: Technische Normen ISO
ISO/IEC 27043:2015 provides guidelines based on idealized models for common incident investigation processes across various incident investigation scenarios involving digital evidence. This includes processes from pre-incident preparation through investigation closure, as well as any general advice and caveats on such processes. The guidelines describe processes and principles applicable to various kinds of investigations, including, but not limited to, unauthorized access, data corruption, system crashes, or corporate breaches of information security, as well as any other digital investigation. In summary, this International Standard provides a general overview of all incident investigation principles and processes without prescribing particular details within each of the investigation principles and processes covered in this International Standard. Many other relevant International Standards, where referenced in this International Standard, provide more detailed content of specific investigation principles and processes. LISO/IEC 27043:2015 fournit des lignes directrices concernant des modeles idealises pour des processus dinvestigation des incidents communs a travers divers scenarios dinvestigation sur incident impliquant des preuves numeriques. Cela inclut des processus allant de la preparation anterieure a lincident a la cloture de linvestigation, ainsi que tout conseil et mise en garde dordre general concernant de tels processus. Ces lignes directrices decrivent les processus et principes applicables a divers types dinvestigations, comprenant, sans toutefois sy limiter, lacces non autorise, la corruption des donnees, les defaillances du systeme ou les violations de securite des informations dentreprise ainsi que toute autre investigation numerique. En resume, lISO/IEC 27043:2015 fournit un apercu general de tous les principes et processus dinvestigation sur incident sans preconiser de details particuliers dans chacun des principes et processus dinvestigation couverts par lISO/IEC 27043:2015. De nombreuses autres Normes internationales pertinentes, lorsquelles sont citees en reference dans la presente Norme internationale, fournissent des contenus plus detailles concernant des principes et processus dinvestigation specifiques.