Forensic evidence gathering impact on business continuity

This research investigated forensic impact on business continuity by studying the factors affecting forensic evidence procedure in the organization after Cyber attack. The paper proposed new approach to organizational IT infrastructure that offers prevention, detection and management measures based on the chosen variables. The review of most literatures on the subject area for proof of concept revealed a pattern of past realization of narrowly focused research on disk based forensic evidence recovering. It was apparent that such characterization of evidence marginalizes the general attribute of electronic forensic evidence scope. This concept is broader than what many researchers have proffered. This research tries to close the gap through identification of key factors that affect forensic evidence that could mitigate business continuity within an organization. The paper enumerated factors that could extend research to needed areas of interest to different organizations including the judicial system. However, the goal of this research focused on what happens to the business in the event of the Cyber attacked that forced the compromised systems to be shutdown until electronic evidence necessary to carry out the collective investigation.