federal-guidance

The assignment should be 2 pages formatted in APA style:

In this activity, we are going to dig into a specific piece of federal guidance to provide an opportunity to evaluate the rapid nature of change in the forensics technical and standards landscape. This assignment will help you understand how rapidly the field of forensics has evolved over the course of a decade and a half.

In July of 2001, the National Institute of Justice (NIJ), through the auspices of the Technical Working Group for Electronic Crime Scene Investigation (TWGECSI), issued guidance entitled “Electronic Crime Scene Investigation: A Guide for First Responders” (PDF). (Links to an external site.) The NIJ Guide surveys the legal and technical landscape for computer forensics as it was emerging during 2001. It mirrors content in your textbook, but at a much higher level. You will find the information valuable in assessing how the field of computer forensics has and has not changed over the last decade and a half. The guide is still the standard for conducting an Electronic Crime Scene investigation, even though many of the technologies it references are no longer produced.

The TWGECSI was the first body to define how to conduct system forensics field examinations. It is notable that the guidance is still in effect today because it shows how difficult it is to create a regulatory body in information security that covers multiples disciplines like law, production standards, and forensic science. Further, the guidance certainly could not anticipate many technologies available today, such as cloud computing, but you should take note that the basic forensic process has not changed.

Read the following from the NIJ Guide (2001) (PDF): (Links to an external site.)

• Foreword, page iii
• Chapter 1, pages 6-22
• Chapter 7, pages 37-44

Reference:

U.S. Department of Justice: Technical Working Group for Electronic Crime Scene Investigation. (2001, Jul). Electronic crime scene investigation: A guide for first responders (National Institute of Justice [NIJ] Guide). Washington, DC: U.S. Department of Justice, Office of Justice Programs. Retrieved from https://www.ncjrs.gov/pdffiles1/nij/187736.pdf

Respond to the following, and be sure to explain your answers:

1. Benefiting from our hindsight as we look back to 2001, do you believe the NIJ Guidance was effective in providing sound systems forensics guidance that could be used in a court of law?
2. What are potential factors that regulatory bodies should consider when designing new regulations for systems forensics to ensure they remain relevant?
3. Describe the pros and cons of including specific forensics implementation guidelines within national-level guidance.
4. What can internal information security experts and managers (people within an organization) do when new technologies must be addressed in a forensics examination prior to the release of new regulations related to those technology changes?

Refer to the rubric for grading criteria.