Skip to content

Digital & technical analysis

Preparing the organization to preserve digital material

Procedures that let the organization preserve important data lawfully, promptly and traceably — before an incident reveals the logs were never kept.

An incident often reveals that logs were not retained, responsibilities were undefined, or material was handled inconsistently.

IVSR helps put in place the procedures that let the organization preserve important data promptly, lawfully and traceably, and hand it over to internal or external specialists.

Possible scope

The scope follows the questions the engagement must answer — not the other way round.

  1. 01An inventory of possible sources of digital material and of the responsible persons.
  2. 02Defining the events that trigger preservation and, where needed, a temporary hold on deletion.
  3. 03Procedures for intake, labelling, copying, storage and hand-over of material.
  4. 04Requirements for time synchronisation, logs, audit trails and access control.
  5. 05Exercises for incident response and internal investigations.
  6. 06Review of the register for a concrete case and identification of missing data.
  7. 07Alignment of security, HR, legal and data-protection requirements.

You receive

Forensic-readiness rules, standard operating procedures, chain-of-custody forms, a source overview, a first-responder checklist and an exercise report.

Who it is for

For IT and security teams, legal functions, data protection officers, internal audit, HR and leadership.

Limitations and boundaries

  • The procedures are designed for evidentiary use and traceability. It cannot be guaranteed in advance that specific material will be admitted or weighed in a particular way in a given proceeding.

Who performs what

IVSR
Research, advisory, methods and training
Next Sight
Technology platforms and technical analysis
The full role separation
Professional leadZvonimir Cvetko DamnjanovićDirector

Related services

Next step

A confidential introductory conversation

Every engagement starts with a confidential conversation in which we jointly verify the purpose, the authority and the feasibility. Only then do we propose the scope and the way of working.

Arrange a conversation