Revision Flashcards
Can you explain to someone what “ACPO” is?
ACPO Good Practice Guide For Digital Evidence v5 2012 – The “… guide is still widely regarded as the definitive best practice guide for computer forensics in the UK and elsewhere.” (7safe.com, 2015)
What is the main thing to remember about ACPO?
The principles;
Apart from the answer to b. above, what other useful things does ACPO cover?
The processes and procedures
Who uses ACPO?
Digital forensic professionals, Police, other countries…
Principle 1
no action taken by law enforcement agencies, persons employed with those agencies or their agents should change data which may subsequently be relied upon in court
principle 2
in circumstances where a person finds it necessary to access data, that person must be competent to do so and give evidence explaining the relevance and implications of their actions
principle 3
an audit trail or other record of all processes applied to digital evidence should be created and preserved. an independent third party should be able to examine those processes and achieve the same result.
principle 4
the person in charge of the investigation has overall responsibility that the law and these principles are adhered too.
principles summarised
- don’t change any data
- if you have to access original data- you have to be able to explain exactly what effects your actions have had on the data
- chain of evidence- who had it, when, why, what
- the person in charge ensures the law and ACPO are followed to the letter
What is the Computer Misuse Act 1990?
UK Legislation, law, about ways you break the law if you use a computer to do certain things
What does ”unauthorised access” mean?
If you don’t have access to something and you get access to it in a way other than being given permission to have access to it, for example guessing a password, using an unlocked computer that is not for general use, using a file you have access to for an unauthorised purpose…
What might you have made if you are charged under section 3A?
Malware…
Section 3 and 3ZA both refer to what?
Intentionally breaking, hiding, preventing access to, or infecting a computer or system or causing damage or harm to a person or persons, economy by using a computer to cause that harm;
What does GDPR stand for? What is GDPR?
General Data Protection Regulation. It is a European Regulation, which tells you how you MUST deal with data covered within the Regulation (the law), it differs from a European Directive which is more of a goal to acheive;
What or whom does GDPR affect?
The data of European Citizens;
Who has to follow GDPR?
GDPR has to be followed by any one or any company any where in the world who collects and stores the data of a European Citizen;
What does GDPR mean you have to do?
European Citizens data can only be collected for appropriate, specific purposes, processed according to and stored according to GDPR guidelines, kept for no longer than is necessary, notify the appropriate channels within 72 hours of a data breach occurring…
If the UK leaves Europe, will we still need to follow GDPR? Why?
Yes, if anyone in the UK is collecting European Citizens data because it affects every country in the entire world if they collect data on European Citizens…
What is the Data Protection Act 2018?
UK Legislation that dictates how peoples personal data is collected, stored, how long it is kept for, how it is processed…
Why do we need to know about the Data Protection Act 2018 and GDPR?
Because the GDPR has been written into UK law as the 2018 Data Protection Act and GDPR will still need to be followed if the UK leave the EU. Also, GDPR and therefore the DPA 2018, both are sensible and help keep all our data safe and allow us as data subjects more rights than we’ve previously had over our own data.
How does the 2018 version differ from the previous 1998 version?
The 2018 DPA builds upon the 1998 act, things have moved on technology wise since 1998 so the act as been updated with that in mind. As mentioned in b. we as data subjects now have far more rights over our data, such as the right to be forgotten and the right to request the data a company hold on us – with out being charged for it.
Why would we need to know about the Data Protection Act 2018 as forensics professionals?
We might need to know about the DPA 2018 for a couple of reasons, firstly we might be analysing a forensic image and find data that has been obtained unlawfully – if we don’t know the DPA 2018, how can we know that. We keep hold of peoples data in many formats throughout an investigation so we must know how to look after the data properly.
what is ethics?
The philosophy of thinking about what is right & wrong
Why do we need to know & think about Ethics?
As digital forensics professionals we need to be doing what is right so if we know what is and isn’t ethical then we can ensure we are acting appropriately at all times;
