CIS 297 - Electronic Discovery for IT Professionals

5.0 Credits
Topics include the identification of potential electronic evidence storage containers and electronic evidence preservation, as well as the tools and methodologies related to the preservation, collection, processing, and production of electronically stored information for legal review and use in legal proceedings.
Prerequisite CIS 273 with a minimum grade of 2.5 or instructor permission.
Course-level Learning Objectives (CLOs)
Upon successful completion of this course, students will be able to:

Describe the various models used in e-discovery, including TRRM, IGRM, Metrics Model, and the Privacy and Security Risk Reduction Model.
Describe the iterative steps that define the Electronic Discovery Reference Model (EDRM) process flow.
Explain how both e-discovery and forensic tools can be used in the e-discovery process, and discuss correlations and contrasts between e-discovery and digital forensics processes and goals.
Identify potential sources and types of electronic evidence located on both private and enterprise computing devices.
Describe litigation hold planning and process considerations for the enterprise overall, as well as those specific to the IT function.
Explain the processes and tools that can be used to create and maintain a data map.
Describe techniques and standards required for proper preservation of potential evidence.
Compare and contrast the purposes and capabilities of tools such as Concordance, Discovery Attender, ipro, escan-it, eclipse, Relativity, onna, and MapForce.
Describe issues that can arise when dealing with cloud-based data storage, and compare/contrast several e-discovery tools designed specifically for dealing with the cloud.
Describe issues that need to be addressed with enterprise/IT policy relevant to BYOD and data ownership.