ISO/IEC 27050-4
ISO/IEC 27050-4:2021 — Information technology — Electronic discovery — Part 4: Technical readiness
(first edition)
Abstract
ISO/IEC 27050 part 4 “provides guidance on the ways an organization can plan and prepare for, and implement, electronic discovery from the perspective of both technology and processes. [Part 4] provides guidance on proactive measures that can help enable effective and appropriate electronic discovery and processes. [Part 4] is relevant to both non-technical and technical personnel involved in some or all of the electronic discovery activities.”
[Source: ISO/IEC 27050-4:2021]
Introduction
In 35 pages, part 4 describes "technical readiness" (defined as "having the knowledge, skills, processes and technologies needed to address a particular issue or challenge") in the context of eDiscovery and eForensics.
It covers the selection, preparation and use of tools supporting each step of the electronic discovery process, including the retention/storage, production and eventual destruction of Electronically Stored Information.
Scope
Guidance on preparing the technology (i.e. the forensic tools and systems supporting the collection, storage, collation, searching, analysis and production of ESI, plus the related processes) and the associated processes required for eDiscovery.
Note: 'technical' is not 'technological'.
Structure
Main sections:
6: Technical readiness
7: Readiness for electronic discovery
8: Additional considerations
9: Electronic discovery cross-cutting aspects
Annex A: ESI storage questionnaire
Status
The current first edition of part 4 was published in 2021.
Commentary
As usual for ISO standards, part 4 offers generic advice and does not specify or recommend specific commercial or free/open-source tools.