文件名称:Guidelines for the management of IT evidence
文件大小:481KB
文件格式:PDF
更新时间:2015-02-14 03:59:34
standards IT证据 安全管理
IT证据管理的指导准则 HB 171—2003 Preface This handbook has been prepared by Committee IT/012, Information Systems, Security and Identification Technology. It is intended for use as a reference document by a variety of audiences, including— a) executives and Boards responsible for ensuring the existence of records that can be used in protecting the interests of their organization by initiating or defending legal proceedings or in their fulfilling a social responsibility as a witness; b) personnel who are responsible for designing/acquiring information technology systems that produce and/or store records and the staff responsible for their use and operation; c) personnel conducting an investigation or enquiry involving electronic records; and d) adjudicators who base their decision, at least partially on IT evidence (e.g. judiciary, tribunal members, administrative management). The authors recognize the cross-disciplinary nature of the management of IT evidence, involving as it does business, legal and information technology professionals. As far as possible, the handbook has been written in “plain English” minimizing both legal and technical jargon. Qualification This handbook does not purport to provide legal advice. Compliance with this handbook does not guarantee the legal admissibility of electronic records—it is a statement of best practice. Organizations are encouraged to seek both legal and other expert advice when implementing information technology systems that create, store, process or transmit documents of significant evidentiary value. Acknowledgements Standards Australia would like to acknowledge Ajoy Ghosh’s efforts in drafting this handbook, authorship of which was sponsored jointly by the Commonwealth Attorney-General’s Department and the Australian Federal Police. The following organizations have contributed to the writing of this handbook: AusCERT Australian Federal Police Australasian Centre for Policing Research Australian Prudential Regulation Authority Australian Securities and Investment Commission Australian Taxation Office Action Group on E-Commerce Commonwealth Attorney-General’s Department Deacons Defence Signals Directorate Standards Australia sub-committee IT/012/04 (Security Techniques)