Portcullis Forensics are able to provide clients with assistance in formulating a Forensic Readiness Plan (FRP) to ensure any incident response, which requires the acquisition of digital evidence, can be conducted effectively and efficiently.
An FRP is an important part of a strategic Incident Response plan. Without both FRP and IR plans, any organisation is severely limiting investigations into an IT Security incident. For example, it is not possible to effectively investigate a network incident unless secure logging has been enabled on network and/or endpoint devices.
A large number of corporate investigations never result in legal action so data does not, therefore, require to be handled in a forensically sound manner. However, it is always possible for an investigation to uncover some illegal activity that has to be handed over to the local law enforcement agencies. If suspect media has not been handled correctly, the whole prosecution case may be jeopardised. Compliance with a FRP will ensure all staff involved in any investigation are aware of the correct procedures to follow when handling digital evidence.
