Digital Forensics Foundation

An understanding of digital forensics is essential to the protection of your organisation in the event of a security breach that involves the loss of confidential information.

The ITG Digital Forensics Foundation course is designed to deliver a comprehensive introduction to digital forensics and help you develop an effective forensic readiness plan for your organisation.

Forensic readiness is the ability to collect, preserve, protect and analyse digital evidence that can be effectively used in any legal matters, in security investigations, in disciplinary matters, in an employment tribunal or in a court of law.
Source: CESG Busy Reader Guide for Forensic Readiness, December 2009

The adoption of a forensic readiness policy is now a mandatory requirement of the Security Policy Framework (SPF) of all UK government departments (HMG Security Policy Framework v.4.0, May 2010). If your company is a supplier to UK national or local government, you may also require a forensic readiness policy.

Ensure your company is forensic ready.

Book on the Digital Forensics Foundation Course now.

By attending this course, you will learn:

1. How to protect your corporate information
2. How to manage a Digital Incident
3. Where to look for Digital Evidence
4. How to preserve Digital Evidence correctly?
5. How to select a Digital Forensics Investigator

"Very good presentation from an enthusiastic knowledgeable person."

Jerry Holcroft, Greenwoods Communications

What does this course cover?

• Digital Forensics – the art and science of digital forensics - get an introduction to the basics of digital forensics as a discipline plus an instructive overview of the types of information which can be found on computers, mobile phones and other forms of digital media. This includes passwords, Google searches, web surfing history, deleted documents and emails.
• Preventing Data Leakage - learn how to minimize the risk of data loss without necessarily spending thousands on technology. You will learn practical solutions to help prevent both accidental and deliberate data security breaches. High-technology techniques that are used for Data Hiding will be revealed and discussed.
• Dealing with computer incidents in the workplace – learn how to contain and limit the damage and how to preserve the evidence, including what to look for to make sure that your organization manages the situation correctly.
• Preparation Strategy and Forensic Readiness: Security incidents present a range of challenges to first responders. Preparation and planning are the key to meeting these challenges head on. This section details vital preparations and measures that will keep volatile situations under control and so helps you plan for the inevitable data security breach.

Attendance at this Digital Forensics Foundation course provides critical advice that enables you to fulfill the Cabinet Office 'minimum mandatory measures' requirement to have a 'forensic readiness policy', covering issues to consider in defining a strategy, identifying responsibilities and putting the required arrangements in place. We will also touch on what you might look for in a Forensics Expert, helping ensure you get value for money.

"An excellent introduction for the time period. Good to have insight from someone who is a practitioner"

Richard Sargent, IT Security Engineer, Scottish & Southern Energy

Available dates  

• 13 Sep 2011
• Now on special offer at £495

• 2 Dec 2011
• 2 Feb 2012

Your Forensics Trainer for this course

This course is taught by a highly qualified Computer Forensics specialist and Expert Witness. Currently a Chief Investigator in private practice working on both Civil and Criminal enquiries, this experienced analyst has been trained to an advanced level in current digital forensic methodologies and tools.

An advisor on security issues to a both large Corporates and SMEs, the presenter is well informed on the latest internal and external threats. This knowledge is enhanced by more than 15 years' experience in investigations and undercover work. The course tutor is also a full member of the Institute of IT Trainers.

ISO27001 Compliance and Best Practice

The ISO27001 standard requires (Control A.13.2.2) an organisation to list, quantify and monitor all security breaches and incidents. It also requires (Control A.13.2.3) that any evidence that it presents in a criminal or civil action against an individual or company fully conforms to all relevant legislation. The best practice advice provided by ISO27002 outlines that these requirements are best achieved by implementing incident response and forensic readiness plans. All such plans are major contributors to ensuring conformance to ISO27001 Clause 7.3 on preventative action – essential to the ISMS continual process improvement.

"Tutor's knowledge base is excellent & diverse around the subject."

Peter Wilson, Information Governance Manager, Sheffield Teaching Hospital

"The trainer was very knowledgeable and I was very pleased to have such an experienced person taking this training."

Stephen Cutts, Technical Manager, Hertfordshire County Council

Are there entry requirements? There are no formal entry requirements Certification

Those that attend the course will receive a formal IT Governance Digital Forensics Foundation Training Certificate.