A cloud customer asks you to conduct a forensic analysis of data stored on a CSP servers. The customer's attorney explains the CSP offers little support for data acquisition and analysis but will help with data collection for a fee. The attorney asks you to prepare a memo with detailed questions of what you need to know to conduct the investigation. This memo will serve in negotiations for the services you'll provide in collecting and analyzing evidence. Your paragraph should be the memo body.(Please write a paragraph of minimum 200 words)
If CSP has no team or limited staff , ask the following questions to understand how the CSP is set up:
1) Does the investigator have the authority to use cloud staff conduct an investigation ?
2)Is detailed knowledge of cloud topology, storage devices is available ?
3)Are there any restrictions on collecting digital evidence from cloud storage ?
4) For e-discovery demoands on multitenant cloud systems, is the data of investigation local or remote ?
5) What is the CSP's relationship with cloud users?
6) What are the SLA's and what are the quidelines to define them ? SLAs should also specify support options, penalties for services not provided, system performce,fees, provided software/hardware
7) CSP must state who is authorizd to access the data ? and limitations for conducting acqusitions for an investigation
8)Digital forensices should review CSP's policies, standards and guidelines for daily operaton
9)What are the CSP's business continuity and disaster recovery plans.
10) Jurisdiction issues:
11)Are there Any plans to revise current laws ?
12)Are there Any cases involving data commingling with other customer's data ?
13)Ask What law controls data stored in the cloud is a challenge?
14)How privacy rights are defined in different jurisdictions is a major factor in problems to access the data .
15)protect praivate information and consult with legal experts to be aware of possible restrictions in an investigation involving cloud data
To access evidence in the cloud :
Are there any court orders , subpoenas with prior notice , search warrants etc ?
What is the configuration of the CSP?
Is the data storage location screctly kept or it is open ?
What are the procedures for log keeping ? so that they will not complicate an investigations chain of evidence
Is ther any threat from hackers so that they will not use any malware an modify the file meta deta ?
Does CSP have a personnel trained to respond to network incidents ?
Who are the data owners , indentity protection , users and access controls for a better role management
What is the right encryption key to decrypt the data if at all the CSP has provided encryption to the data
A cloud customer asks you to conduct a forensic analysis of data stored on a CSP...
Hello! Could you please write your own four paragraph (5-6 sentences per paragraph) take away or reflection of the below information? Please complete in 24 hours if possible. Thank you! RIS BOHNET THINKS firms are wasting their money on diversity training. The problem is, most programs just don’t work. Rather than run more workshops or try to eradicate the biases that cause discrimination, she says, companies need to redesign their processes to prevent biased choices in the first place. Bohnet...