Home

ISO/IEC 27043:2015
Subscribe to updates

Information technology -- Security techniques -- Incident investigation principles and processes

This standard is also included in the online collection: Information Security Management Systems.

Abstract

ISO/IEC 27043:2015 provides guidelines based on idealized models for common incident investigation processes across various incident investigation scenarios involving digital evidence. This includes processes from pre-incident preparation through investigation closure, as well as any general advice and caveats on such processes. The guidelines describe processes and principles applicable to various kinds of investigations, including, but not limited to, unauthorized access, data corruption, system crashes, or corporate breaches of information security, as well as any other digital investigation.

In summary, this International Standard provides a general overview of all incident investigation principles and processes without prescribing particular details within each of the investigation principles and processes covered in this International Standard. Many other relevant International Standards, where referenced in this International Standard, provide more detailed content of specific investigation principles and processes.

 

  • Edition: 1 (Monolingual) ICS: 35.040
    Status: Published Stage: 60.60 (2015-03-04)
    TC/SC: ISO/IEC JTC 1/SC 27 Number of Pages: 30
  • No revision information available

  • No corrigenda or amendments available

Related standards

Format
  • PDF

    This format preserves the paper layout, and is watermarked

  • EPUB

    This format allows documents to be read on tablets and smartphones

  • COLOUR PDF

    Enhanced user-friendly colour PDF format

  • REDLINE

    See any updates made from previous versions at a glance

  • PAPER

    Normally A4 size documents. Shipping costs apply

Language
PDF
Paper

Swiss francs CHF 138

Add to basket

Got a question?

Check out our FAQs

Email customer services
or call us on +41 22 749 08 88
09:00 – 12:30, 14:00 – 17:00 (UTC+1).