Industry Standards
There are many industry standards for investigations of all sorts, including IT security and data investigations; applicable standards for a given organization depend on a host of variables, such as geographic region/jurisdiction, the nature of the data in question, the business of the organization, and so forth.
4 slides · 1 min read · Domain 1
The following is a sample list of standards from around the world; this list is in no way comprehensive or definitive, and a security professional will not be required to memorize these standards for certification purposes.
Many of these standards include common principles and methods of execution, so it is encouraged to review them for insight into professional investigation approaches and expectations.
ASIS/ANSI Investigations Standard INV.1 - 2015
Text on this slide
Council of the Inspectors General on Integrity and Efficiency
Quality Standards for Investigations
American Bar Association
Standards on Prosecutorial Investigations
Click to see more
Click to see more
Click to see more
Australian Government Investigations Standards
ISO 27043 - 2015
Information technology - Security techniques - Incident investigation principles and processes (requires payment)
Click to see more
Click to see more