Re: Case Images

[Mike Fox <mfox () GEORGIASOUTHERN EDU>]

Kevin,

A good way to hold those images is via a RAID environment. As long as you
can prove that your image is the same as the original (cryptographic hashing
is a good way) you shouldn't have problems with storing your images on
network storage. Hard drives do go bad while sitting on shelves.

*Mike Fox*
Georgia Southern University
Information Technology Services
Information Security
(912)478-1592

Jeremiah 29:11-16
___________________________________________________________________________________________________________________________________________________________________


Hi Everyone:



I am wondering if anyone has come across a good, secure (J  ) and effective
way to archive their HD images from internal cyber investigations/
litigation hold work?  We do a fairly large amount of these each year and it
is becoming cumbersome to physically store the actual hard drives, not to
mention it’s not really cost effective to keep purchasing additional
drives.



We do roll the cases off per our retention policy (case closed +1, +2 etc.)
 but some of the cases remain active for legal reasons even though we don’t
need to do anything with them other than store them safely.  The cases that
remain open with no activity required are the ones I am thinking about
archiving off somewhere/somehow.



Thanks in advance for any process or best practice ideas you would be
willing to share,



- Kevin





Kevin L. McLaughlin,  CISM, CISSP, GIAC-GSLC, PMP, ITIL Master Certified

Assistant Vice President, Information Security & Special Projects

University of Cincinnati

513-556-9177



The University of Cincinnati is one of America's top public research
institutions and one of the region's largest employers, with a student
population of more than 41,000.


[image: cid:image002.gif@01C879E9.E20A0EF0]
*
*