.

Forensic case data retention

<<

jimbob

Post Wed Sep 05, 2007 3:21 am

Forensic case data retention

Hi,
I was wondering what the view was on retaining data from forensics cases you've worked on. Is the consensus that it is prudent to delete all evidence and work product following the conclusion of a case, or do people retain this for a period of time? I'm thinking of cases outside law enforcement where there are well defined guidelines on evidence retention.

Regards,
Jimbob
<<

dalepearson

Sr. Member
Sr. Member

Posts: 357

Joined: Thu Nov 09, 2006 10:03 am

Post Wed Sep 05, 2007 10:00 am

Re: Forensic case data retention

Unless there is a legal requirement or a legislative requirement to your company for data preservation then I don’t think there is a need to store this after a case has ended.

However if storage is not an issue, I would consider saving for 6 - 12 months incase something to do with the case reopens, in either case I would seek guidance from the legal / compliance department to cover your own back.
<<

d1spat3r

User avatar

Newbie
Newbie

Posts: 28

Joined: Mon Dec 04, 2006 10:13 am

Location: Wisconsin

Post Wed Sep 05, 2007 10:28 am

Re: Forensic case data retention

We have a policy that all data is retained for cases for a minimum of 3 years no matter what type of case.  This policy was designed by our legal department (and is under review at the end of the year). 

If this is for a small shop then it really depends.  If the case might go to trial then i would store the information for a longer period of time.
CISSP, GSEC, GCFA

Return to Forensics

Who is online

Users browsing this forum: No registered users and 0 guests

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software