Towards a capability maturity model for digital forensic readiness

Englbrecht, Ludwig; Meier, Stefan; Pernul, Günther

doi:10.1007/s11276-018-01920-5

Cited by 22 publications

(10 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It can indicate whether a process has been properly implemented and performed. CMMI allows a quality assessment for the initial and target state, shows improvements needed, and provides a basis for benchmarking [25]. The following are the steps for data analysis.…”

Section: A Steps In Research 1) Identify the Objectives Of The Propos...mentioning

confidence: 99%

Leveraging COBIT 2019 to Implement IT Governance in SME Context: A Case Study of Higher Education in Campus A

Utomo

Wijaya

Suzanna

et al. 2022

CommIT (Communication and Information Technology) Journal

View full text Add to dashboard Cite

Achieving business and Information Technology (IT) alignment has become the aspiration of most organizations nowadays. Small and Medium Enterprises (SMEs) are not exempt as they also thrive to survive in a competitive market using IT. However, implementing all IT control and management components will be excessive, with a lack of justifiable cost-benefit for SMEs. A tailored governance system based on the specificities of SMEs is necessitated to help the organization to focus on its main objectives and strategies. By leveraging COBIT 2019 design toolkit, the researchers support Campus A in establishing healthy governance and IT management. Both qualitative and quantitative approaches are applied to select relevant governance/ management objectives. The toolkit has been designed with a semi-automated quantitative approach in which users will get scoring for each objective based on the associated value inputted for each design factor. Through a series of discussions with the management team, it concludes the governance design and recommends several improvements to increase its capability level, from the current level of 1.05 (initial stage) to the desired level of 2.33 (repeatable stage). Then, since the toolkit is practical to use, it is also rigid by design with its predefined and protected formula. To some extent, the resulting score or importance level of certain governance/management objectives is questionable and lacks justification. Flags or indicators to ‘should-have’ governance/management objectives, regardless of the organization’s size and type, will be useful to prevent the omission of essential objectives.

show abstract

Section: A Steps In Research 1) Identify the Objectives Of The Propos...mentioning

confidence: 99%

Leveraging COBIT 2019 to Implement IT Governance in SME Context: A Case Study of Higher Education in Campus A

Utomo

Wijaya

Suzanna

et al. 2022

CommIT (Communication and Information Technology) Journal

View full text Add to dashboard Cite

show abstract

“…However, most models are intended for examining the DFR of individual systems, and there is no standardized model to assess the readiness for the entire enterprise [106]. The self-assessment maturity model for financial company, as described by Englbrecht's (2020) [107], is adopted in this research. Because K-FFRaaS is composed of 11 processes at each stage, the level of maturity can be determined by reckoning the capability of each process via the process mining techniques, such as the conformance checking [108].…”

Section: ) Dfr Cmmi Planmentioning

confidence: 99%

K-FFRaaS: A Generic Model for Financial Forensic Readiness as a Service in Korea

Lee

Kim

2021

IEEE Access

View full text Add to dashboard Cite

While Korean financial companies are currently providing electronic financial services by establishing the high-level information technology and security system in accordance with the Electronic Financial Supervision Regulations (EFSR), they are rarely equipped with digital forensic readiness (DFR) to maximize the capability to collect critical digital evidence (DE). So, there is a limit to identifying the root cause of financial incidents and securing admissible DE. In this paper, there, the authors present Financial Forensic Readiness as a Service in Korea (K-FFRaaS), as DFR of financial companies to secure the admissible DE. Based on ISO/IEC 27043:2015 international standard, K-FFRaaS consists of 3 processes groups, namely: Planning processes group, Implementation processes group, and Assessment processes group. Planning processes group is the processes group to prepare the organization to be forensically ready before potential incidents happen. Implementation processes group is the stage to carry out the processes defined in the planning group. Assessment processes group consists of activities that evaluate whether the result of the implementation process group is consistent with the objective of K-FFRaaS. The contribution of this research is to present that the financial company can adopt the systematic management procedure for mitigating the causes of incidents, store admissible DE, and present scientific evidence to a court of law through K-FFRaaS.

show abstract

“…The awareness for DF can significantly increase the maturity level of a company for Digital Forensic Readiness (DFR). However, this aspect is one of the most difficult challenges to reach a company-wide maturity level in DFR [4].…”

Section: Introductionmentioning

confidence: 99%

A Serious Game-Based Peer-Instruction Digital Forensics Workshop

Englbrecht

Pernul

2020

IFIP Advances in Information and Communication Technology

Self Cite

View full text Add to dashboard Cite

Increasing threats in the area of information security raise the necessity for companies to be prepared for a digital forensic investigation. However, even the best investments in technology and infrastructure will fail if employees are not adequately trained. In this paper we propose a workshop concept combining the peer instruction method and elements from the field of serious games. The goal of the combined methods is to enable the participants to investigate a use case in an interactive and playful way. Our concept guides the participants step by step into an increasingly independent way of performing a digital forensic investigation.

show abstract

Towards a capability maturity model for digital forensic readiness

Cited by 22 publications

References 14 publications

Leveraging COBIT 2019 to Implement IT Governance in SME Context: A Case Study of Higher Education in Campus A

Leveraging COBIT 2019 to Implement IT Governance in SME Context: A Case Study of Higher Education in Campus A

K-FFRaaS: A Generic Model for Financial Forensic Readiness as a Service in Korea

A Serious Game-Based Peer-Instruction Digital Forensics Workshop

Contact Info

Product

Resources

About