Computer Forensics Laboratory

(I)

A laboratory to conduct computer forensic investigation must be well equipped to be successful in data extraction, discovery and analysis.

The forensics lab can be in a form of a small room or even be of an entire building. It depends on what kind of forensic activity is being conducted and also the volume of forensic investigations that the lab has to cater to.

(II)

Some countries such as the United States has nationally recognized certifications to ensure the quality of the lab, e.g. American society of crime lab directors / laboratory accreditation board. If possible, it is best to get the lab to be certified.

The security of the forensics laboratory is of extreme importance. It must be secure against physical threats such as intrusion, theft and even natural disasters. There must be some kind of access control to ensure that unauthorized persons do not enter. A log book may be in place to note who is in and out of the lab at any particular time.

(III)

It is best that the computer forensics lab do not have any windows. If there are any windows, it must be sealed. The exact location of evidence artefacts stored in the lab must not be revealed as an extra precaution from theft. It is also good to avoid or limit having false ceilings and floors so intruders don't have space to hide anything if not themselves in them.

There should only be one entrance or exit into the lab also for obvious reasons. We definitely do not want intruders to be leaving from the other door when we're coming in through one. Access control is also much easier when there is only one entrance.

Good physical locks are necessary when maintaining a good forensics lab. It will be fancy to have a biometric security system in place but most importantly, the lab must not be easily broken into. Sometimes a combination of type of locks can be installed to ensure this.

(IV)

Uncommon to physical security recently are closed circuit television (CCTV) to track entries or break-ins. That, together with 24 hour monitored alarm systems that notifies the authorities of a breach automatically can also serve as an added security feature to your computer forensics laboratory.

If possible the lab should also be placed in a building surrounded by a fence or have security guards present.

Different forensics lab setup in different types of vicinity has different security needs. The more secure your lab is will also boost your customers' trust and confidence in your ability to conduct a proper computer forensic investigation.