1. S-1 © RGP & UW-CISA 2010 Business & Technology Environment Summer 2010 Robert G Parker

2. S-2 © RGP & UW-CISA 2010 Business & Technology Environment Summer 2010 Robert G Parker

3. S-3 © RGP & UW-CISA 2010 Crisis Management Privacy Social Networks eDiscovery / eEvidence Cloud Computing Parallel Programming Agenda

4. S-4 © RGP & UW-CISA 2010 eDiscovery / eEvidence eDiscovery and eEvidence

5. S-5 © RGP & UW-CISA 2010 eDiscovery / eEvidence Have a documented plan before you investigate; particularly when computer file are involved Destroying evidence quality during initial investigation of a problem is a key risk

6. S-6 © RGP & UW-CISA 2010 eDiscovery / eEvidence

7. S-7 © RGP & UW-CISA 2010 eDiscovery / eEvidence When eMail replaces conversations we may be creating a new standards by which we are judged. Previously only the decision, and not the conversations may have been documented. For example, the courts could determine, based in eMails, that some aspect was not considered, or not considered in sufficient depth

8. S-8 © RGP & UW-CISA 2010 eDiscovery / eEvidence If there is a court order to obtain/retain eEvidence, how is that accomplished in an organization that may have thousands of eMails and other electronic documents a day? Organizations may have policies and may have procedures designed to support those policies, however: They may not have the technology to support the identification and retention of the required documents, particularly eMails

9. S-9 © RGP & UW-CISA 2010 eDiscovery / eEvidence New tools are being developed to obtain and document eDiscovery results This document walks the user through the steps to ensure that information is retained in response to an eDiscovery hold notice

10. S-10 © RGP & UW-CISA 2010 eDiscovery / eEvidence eDiscovery / eEvidence conference “Organizations may have no clue about their IT infrastructure, so they end up consenting to a retention and discover order that may have a $500,000 cost of compliance.” Judges may not fully comprehend the technology issues of court orders where electronic evidence is involved

11. S-11 © RGP & UW-CISA 2010 eDiscovery / eEvidence eMail usage Contents Retention The profession and business should establish standards, guidelines, policies and procedures regarding: To protect ourselves and our organization in the event of a lawsuit? There may be a role for CAs in conducting technology based electronic and forensic audits IT audit, control and security professionals in conjunction with legal experts should address eDiscovery / eEvidence in a business context