Defence / Insights / Forensics
Forensics

The standards behind admissible digital evidence

Evidence that cannot withstand scrutiny is worthless. Standards and method are what make digital evidence hold up.

Recovering data is not the same as producing evidence. For findings to be relied upon and to withstand challenge, they must be obtained and handled to recognised standards, by competent people using sound, repeatable methods. Standards are what separate credible evidence from mere data.

What the standards require

  • Methods that are sound, documented and repeatable
  • Integrity preserved and demonstrable throughout
  • Competent, qualified practitioners
  • Clear, honest reporting of findings and their limits

Repeatability and honesty

Sound forensics produces results another competent examiner could reproduce, and reports them honestly, including uncertainty and limitations. Overstating what evidence shows is as damaging as mishandling it; credibility rests on rigour and candour alike.

Why it matters to the outcome

Evidence that falls short of these standards can be challenged and dismissed, however significant it seemed. Working to recognised standards from the outset is what ensures the effort of an investigation produces something that actually stands up.

Defence & Specialised Technologies

Capabilities are shared confidentially, with authorised organisations only.