A framework for assessing the core capabilities of a digital forensic organization

Abstract

This chapter describes a framework for building and managing the capabilities of digital forensic organizations. The framework employs equations that express the relationships between core capabilities, enabling the definition of digital forensic capabilities. Straussian grounded theory is used to create the theoretical framework that is grounded in the data. The framework is also grounded in the literature on digital forensic capabilities, specifically research related to digital forensic readiness, capability maturity models, digital forensic management frameworks and best practices for building and managing digital forensic laboratories. Thus, the framework is readily integrated with other theories; indeed, it can identify gaps existing in the theories and provides opportunities to extend the theories.