摘要:Litigation these days involves Electronically Stored Information (ESI) for legal purposes. Electronic discovery, also known as eDiscovery, is a process involving legal parties on a case to preserve, collect, review, and exchange electronic information for the purpose of using it as evidence in the case. In the past two decades, the software industry has launched many products catering to eDiscovery. With the advent of cloud computing, storage of electronic data has become cheaper and attractive for eDiscovery needs. With the ever growing technological advances, access to such storage has become simplified for enterprises distributed across the globe. eDiscovery product vendors have embraced the cloud and often allow their products to store and retrieve electronic evidence from the cloud. In this paper, we survey and explore eDiscovery product features focusing on available product security features, security features for evidence protection, incident forensics readiness and cloud forensics. We strive to highlight the challenges in the eDiscovery field when handling vast volumes of electronic evidence and propose incorporating industry best practices in implementing effective security and incident forensics at the product level.
关键词:Security; eDiscovery; Electronic Discovery Reference Model (EDRM); Electronic Stored Information (ESI); Digital Forensics; Cloud Security; Digital Evidence; Incident Forensics.