9781422273418

Legal and Ethical Responsibilities Digital forensics experts don’t have a single code of ethics or standards they must comply with. There are guidelines for court testimony, including the Federal Rules of Evidence, which apply to all expert witnesses in court proceedings. The International Society of Forensics Computer Examiners (ISFCE) offers guidelines that help digital forensics investigators tomaintain a professional and fair approach in legal proceedings. The ISFCE guidelines include: • In all forensic examinations, investigators should maintain the greatest objectivity and present accurate findings. • All matters should be testified to truthfully before the court. • The examiner should avoid conflicts of interest. • Examinations must be based on well-established principles. • The examiner is forbidden to reveal confidential information without a court order or client permission. • The investigator can’t misrepresent credentials or memberships in professional associations. Other associations, including the High Technology Crime Investigation Association (HTCIA) and International Association of Computer Investigative Specialists (IACIS), have requirements for their members, which include: • Using specialized techniques and advanced technologies to uncover the truth. • Emphasizing integrity and truth in the course of investigation. • Maintaining objectivity and presenting facts of a case accurately. • Providing unbiased opinions. In addition, all computer forensics associations prohibit members from concealing anything they find in the course of an investigation that could prevent justice from being served or permit the facts of an investigation to be misrepresented. Work Environment Digital forensics experts can work in a variety of environments. They may work in a digital forensics lab, which will contain equipment they

12

Digital Forensics