ISO/IEC 27050-2:2018

Information technology — Electronic discovery — Part 2: Guidance for governance and management of electronic discovery

This document provides guidance for technical and non-technical personnel at senior management levels within an organization, including those with responsibility for compliance with statuary and regulatory requirements, and industry standards. It describes how such personnel can identify and take ownership of risks related to electronic discovery, set policy and achieve compliance with corresponding external and internal requirements. It also suggests how to produce such policies in a form which can inform process control. Furthermore, it provides guidance on how to implement and control electronic discovery in accordance with the policies.

Technologies de l'information — Découverte électronique — Partie 2: Lignes directrices pour la gouvernance et le management de l'investigation informatique

General Information

• Status: Published
• Publication Date: 01-Oct-2018
• ICS: 35.030 - IT Security
• ICS: 35.040 - Information coding
• Technical Committee: ISO/IEC JTC 1/SC 27 - Information security, cybersecurity and privacy protection
• Drafting Committee: ISO/IEC JTC 1/SC 27/WG 4 - Security controls and services
• Current Stage: 9060 - Close of review
• Start Date: 04-Jun-2029

Standards Content (Sample)

INTERNATIONAL ISO/IEC
STANDARD 27050-2
First edition
2018-09
Information technology — Electronic
discovery —
Part 2:
Guidance for governance and
management of electronic discovery
Technologies de l'information — Découverte électronique —
Partie 2: Lignes directrices pour la gouvernance et le management de
l'investigation informatique
Reference number
ISO/IEC 27050-2:2018(E)
©
ISO/IEC 2018

---------------------- Page: 1 ----------------------
ISO/IEC 27050-2:2018(E)

COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2018
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting
on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address
below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Fax: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii © ISO/IEC 2018 – All rights reserved

---------------------- Page: 2 ----------------------
ISO/IEC 27050-2:2018(E)

Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Symbols and abbreviated terms . 1
5 Electronic discovery background . 2
6 Governance of electronic discovery . 4
6.1 Context and principles. 4
6.2 Mandate and establishment . 4
6.3 Evaluate . 4
6.4 Direct . 4
6.5 Monitor . 5
7 Management of electronic discovery . 5
7.1 Context and controls . 5
7.2 Archival policies . 5
7.3 Discovery policies . 5
7.4 Disclosure policies .
...