Information NOT Technology: Getting the Best from Digital Evidence and eDisclosure

*FREE COURSE*

Duration: This seminar is accredited by the Solicitors Regulation Authority and Bar Standards Board for 2 hours CPD

Venue: CIFAS, 6th Floor Lynton House, 7 - 12 Tavistock Square, London WC1H 9BQ

Date: Thursday 18 February 2010, 10.30 am

Course overview:

This is a two-hour course designed to introduce lawyers to all aspects of computer system investigations, especially the eDisclosure process. It will look at information identification, what may be recovered, and how it can be presented. It is aimed at the following:

Practice Partners
Practice Managers
Litigation Lawyers (all levels)
Litigation Support Managers
Legal IT Personnel

Course outline

The course deals with the following issues:

Information
This section will look at how to identify and acquire information in today's environment, and the risks associated with that acquisition.  It will also examine the context within which information may be found and look at the resilience that is particularly associated with electronic information and the impact that this may have.

Electronic Evidence
This will cover the basic principles and mechanisms around the recovery of electronic evidence. It will look at data capacity and examination issues and what actions may be taken to reduce the time involved in dealing with these.

E-disclosure Case Management
This will expand upon the first section to deal with information identification, the legal framework for the e-disclosure process, and the management of that process from the planning stage to project review.

A brief look at how e-disclosure processes need to be carried out and what may be discovered.  A look at the processing of data and the creation of files for use in litigation support software or case review software such as Concordance, Summation or iConect.

Searching & Filtering
This will provide an understanding of search and filter techniques that will give the best opportunity of identifying relevant evidence.

Electronic Mail
This will provide information concerning the recovery and examination of email data including identification of email routing.

It will look at how email is created, distributed and delivered. It will examine areas where trace elements of sent emails may be discovered and also look at how an email stores details of its sender, recipient and delivery route.

Metadata
Metadata is essentially ‘data about data'. This section will look at metadata in relation to electronic document software in common use today. It will examine information a document portrays about itself that may include authorship, storage information, print or copy details, and various date and time information including creation and modification dates.

The Overall Picture
It will open with an examination of what constitutes information in the present day digital environment, and the issues that impact upon the interpretation of that information. It will outline in simple terms the impact and use of digital evidence recovery processes in support of an investigation/e-disclosure task. It will move on to examine how the eDisclosure process may be effectively implemented and managed from the initial planning stage to presentation at court.  The course will close by an examination of other sources of digital information that may support the investigation at hand.