Managing corporate computer forensics

Many organizations now have an IT security strategy in place covering the management of IT security facilities and activities within the organization. Computer forensics has previously been an activity limited mainly within the bounds of law enforcement agencies. However, commercial organizations are increasingly making use of computer forensics in areas such as fraud, money laundering, the accessing or distribution of pornography, or harassment. In this article we outline a framework for the management of computer forensic facilities and activities within a corporate setting.