Metrics & CISO Series (2)

Following up on my earlier post on Metrics & CISO Series ( metrics-ciso-series ) and how Metrics has relevance to digital forensics I did refer to books, standards and the Forensic Science Regulator. To add more references where digital forensics Metrics has been recognised as important to understanding digital forensics contribution-value to the Criminal Justice Systems (CJS):

The UK Home Office, Association of Police and Crime Commisioners (APCC) and National Police Chiefs' Council (NPCC) circulated "Implementation Plan For the joint review of forensics provision (2018)" Published in April 2019. It states the purpose of the review:

"The Review was commissioned to evaluate the provision of forensic science to criminal investigations and criminal court proceedings in England and Wales, following Key Forensic Services’ entry into administration in January 2018 and persistent stakeholder concerns regarding quality.

The Review’s primary focus was the operation and management of the market, but Ministers and the Review team recognised that a broader set of issues have a significant impact on stakeholder’s confidence in the system’s ability to deliver high quality forensics into the CJS.

Given that there is a mixed model of provision in England and Wales, the Review considered both ‘in-house’ and commercial forensic services. It considered the quality, cost and delivery of all forms of forensic science including digital forensics and its impacts on outcomes for the criminal justice system. Investment in research and development incentives and structures, governance and accountabilities in the Home Office and policing were also in scope."

Later in the same document it identifies actions develop metrics:

"Actions:

13. The Home Office and the Transforming Forensics Programme will work with the Ministry of Justice and CJS partners to develop metrics to illustrate the impact of forensic science on police work, CJS outcomes, public confidence and costs – both to the CJS and the wider economy."

Digital Forensic Science Strategy July 2020 published by Transforming Forensics (TF), Forensic Capability Network (FCN), Association of Police and Crime Commisioners (APCC) and National Police Chiefs' Council (NPCC) 

"To measure and monitor the contribution DF science makes to investigations we need to implement a forensic information ecosystem, available to all DFUs. As outlined previously, this strategy proposes that TF develop the high-level design and roadmap for this system, in agreement with forces, the FCN and CJS partners. It will include appropriate performance measures, based on available data, which TF will work up in close collaboration with the Home Office as part of a wider initiative to develop suitable metrics for measuring DF science performance across the whole CJS."

Scottish Police Authority published Forensic Services Committee paper Digital Forensics Working Group Report on 20th April 2020

The purpose of this paper is to:- To present the Report of the Digital Forensics Working Group for Committee consideration, agreement of the Recommendations of the Report, and noting of the additional work required.

"Background to digital forensics and crime

4. Digital forensic science is the process of obtaining, analysing and using digital evidence in investigations or criminal proceedings. There is however a paucity of data in relation to the demand for digital forensics capabilities within UK police forces as the ubiquity of digital devices means that digital evidence may be present in almost every crime. However whilst metrics appear scarce, it is widely accepted that the proliferation of digital devices and technologies is increasing police investigative demand for digital forensic techniques." 

LABELS: accuracy, C-Level Officers, Chief Information Security Officer, CISO, cybersecurity, Forensic Science Regulator, FSR, information security management, ISO standards, Metrics, quality, risk assessment