Discuss the three elements that are required to ensure that the forensics process is both trustworthy and sustainable.

What will be an ideal response?

Three elements are required in order to ensure that the forensics process is both trustworthy and sustainable. First, a mechanism has to be in place to assure that the personnel who do forensics work have been properly trained. Forensics work requires a broad range of capabilities, many of which are typically not found in conjunction with each other.

The second element that ensures trustworthy and sustainable forensics activities concerns specialized tools and equipment. These are required to ensure that every aspect of the collection and handling of virtual evidence is documented in such a way that the absolute integrity of the chain of custody is maintained.

The third element concerns the establishment of the interface between the forensic process and the overall IT operation. In essence, the condition has to be assured where conventional IT processes will enable all necessary activities of the digital forensic process.