A decision-making approach for improving organizations’ cloud forensic readiness

Abstract

Cloud forensic investigation involves a number of different people and requires a lot of effort to resolve an incident. In order for an organization to have better chances to succeed in the investigation, it needs to be well-prepared. Hence, the organization needs to develop cloud forensic readiness. This paper introduces a decision-making approach to calculate the forensic readiness and the compliance level of an organization, and in parallel to classify the unimplemented tasks in a cloud service. The specific approach is based on a decision-based algorithm, the organization’s forensic compliance and a number of decision-making criteria.