Setting up the Forensic Laboratory

Size: px
Start display at page:

Download "Setting up the Forensic Laboratory"

Transcription

1 Chapter 3 Setting up the Forensic Laboratory Tabe of Contents 3.1 Setting Up the Forensic Laboratory Forensic Laboratory Terms of Reference The Status of the Forensic Laboratory The Forensic Laboratory Principes Responsibiities Integrity Quaity Efficiency Productivity Meet Organizationa Expectations Heath and Safety Information Security Management Information Systems Quaifications Training Maintaining Empoyee Competency Empoyee Deveopment Environment Supervision Conficts of Interest Lega Compiance Accountabiity Discosure and Discovery Work Quaity Accredited Certification Membership of Appropriate Organizations Obtain Appropriate Persona Certifications Laboratory Service Leve Agreements Impartiaity and Independence Codes of Practice and Conduct Quaity Standards Objectivity Management Requirements Forensic Laboratory Poicies Documentation Requirements Competence, Awareness, and Training Panning Risk Assessment and Management Business Impact Anaysis Lega and Reguatory Considerations Insurance Contingency Panning Roes and Responsibiities Business Objectives Laboratory Accreditation and Certification Poicies Guideines and Procedures 33 Appendix 1 - The Forensic Laboratory ToR 33 The Vision 33 Scope and Objectives 33 Deiverabes 34 Boundaries, Risks, and Limitations 34 Roes, Responsibiities, Authority, Accountabiity, and Reporting Requirements 34 Stakehoders 34 Reguatory Framework 34 Resources 34 Work Breakdown Structure and Schedue 34 Success Factors 34 Intervention Strategies 34 Appendix 2 - Cross Reference Between ISO 9001 and ISO Appendix 3 - Confict of Interest Poicy 36 Appendix 4 - Quaity Poicy SETTING UP THE FORENSIC LABORATORY This chapter is the summary of many sma eements, each of which gives guidance on areas that wi need to be considered from the panning stage onward. A of the eements discussed beow wi need to be addressed both for good management and for preparation for accreditation and certification for the Forensic Laboratory. When initiay setting up the Forensic Laboratory, there are a number of issues that wi need to be considered. Many of these have been touched on in the previous chapters, and some are expanded here, others have dedicated chapters ater in the book. Once the business case (or the equivaent if in government or aw enforcement) has been deveoped, a range of issues wi need to be addressed and these must be documented to describe the fundamenta basis on which the Forensic Laboratory is being estabished and on which it 25

2 26 Digita Forensics Processing and Procedures wi be run. The first issue that shoud be ceary documented is that of the Forensic Laboratory s Terms of Reference (ToR). There wi aso normay be a ToR for the project to deveop and deiver to the Forensic Laboratory, but the concepts that are given beow hod good for both cases Forensic Laboratory Terms of Reference The ToR is the document that serves as the basis of the reationship between the owning organization of the Forensic Laboratory and the team responsibe for carrying out the work. It describes the purpose and structure of the Forensic Laboratory and shows how the scope of the Forensic Laboratory wi be defined and verified. It wi aso provide the yardstick against which the success of the Forensic Laboratory wi be measured. It provides a documented basis for future decisions and for a common understanding of the scope among the stakehoders. The ToR sets out a cear path for the operation of the Forensic Laboratory by stating what needs to be achieved, by whom and when. It identifies the set of deiverabes that satisfy the requirements and the scope and any constraints shoud be set out in this document. The ToR for the operation of the Forensic Laboratory shoud be created during the eariest stages of the project for the estabishment of the Forensic Laboratory immediatey after the business case has been approved. Once the ToR has been approved, there is a cear definition of the scope of the Forensic Laboratory. The ToR wi aso identify the success factors, risks, and boundaries. The ToR needs to be written in some detai and shoud incude the foowing: vision; scope and objectives; deiverabes; boundaries, risks, and imitations; roes, responsibiities, authority, accountabiity, and reporting requirements; stakehoders; the reguatory framework; resources avaiabe; work breakdown structure and schedue; success factors; intervention strategies. A description of the ToR is given in Appendix 1. Once the ToR has been deveoped, a range of other eements that outine how the Forensic Laboratory is structured and how it wi operate need to be deveoped The Status of the Forensic Laboratory There shoud be cear statement of the status of the Forensics Laboratory. This shoud define the ownership, the services that it wi offer, the structure of the aboratory, the standards that it wi work to, and the expected customers. This shoud be prepared in some detai as it wi be the foundation for future decisions The Forensic Laboratory Principes The Forensic Laboratory sha be run in accordance with the foowing aboratory principes: Responsibiities The Forensic Laboratory reies upon the Laboratory Manager to deveop and maintain an efficient, high-quaity forensic aboratory. The Laboratory Manager hods a unique roe in the baance of scientific principes, requirements of the Crimina Justice System, and the effects on the ives of individuas that may be subject of an investigation that reies on digita forensic evidence. The decisions and judgments that are made in the Forensic Laboratory must fairy represent a interests with which they have been entrusted. Users of the Forensic Laboratory services must be abe to rey on the reputation of the Forensic Laboratory, the abiities of their Forensic Anaysts, and the standards of the profession Integrity The Forensic Team must be honest and truthfu with their peers, supervisors, and subordinates. They must aso be trustworthy and honest when representing the Forensic Laboratory to outside organizations Quaity The Forensic Team is responsibe for impementing quaity assurance procedures which effectivey monitor and verify the quaity of the work product of their aboratories. The Forensic Laboratory compies with the requirements of ISO 9001 and ISO Efficiency The Forensic Team shoud ensure that the Forensic Laboratory s products and services are provided in a manner which maximizes organizationa efficiency and ensures an economica expenditure of resources and personne Productivity The Laboratory Manager shoud estabish reasonabe goas for the production of forensic casework in a timey fashion. Highest priority shoud be given to cases which have a potentiay productive outcome and which coud, if successfuy concuded, have an effective impact on the enforcement or adjudication process.

3 Chapter 3 Setting up the Forensic Laboratory Meet Organizationa Expectations The Laboratory Manager must impement and enforce the reevant organizationa poicies and procedures and shoud estabish additiona interna procedures designed to meet the ever-changing needs of forensic case processing Heath and Safety The Laboratory Manager sha be responsibe for panning and maintaining systems that reasonaby assure safety in the Laboratory as we as when the Forensics Team are in the fied. Such systems shoud incude mechanisms for input by the Forensic Team, maintenance of records of injuries, and routine safety inspections as defined by existing Heath and Safety procedures. The Forensic Laboratory compies with the requirements of OHSAS Information Security The Laboratory Manager sha be responsibe for panning and maintaining the security of the Forensic Laboratory. Security measures shoud incude contro of access both during and after norma business hours. The Forensic Laboratory compies with the requirements of ISO Management Information Systems The Laboratory Manager sha be responsibe for deveoping management information systems. These systems shoud provide information in a timey manner regarding current and past work carried out by the Forensic Laboratory Quaifications The Laboratory Manager must hire empoyees of sufficient academic quaifications or experience to provide them with the fundamenta scientific principes for work in the Forensic Laboratory and must be assured that they are honest, forthright, and ethica in their persona and professiona ife Training The Laboratory Manager sha provide training in the principes and the detais of forensic science as it appies to the Forensic Laboratory requirements. Training must incude handing and preserving the integrity of physica evidence. Before anaysis and casework are performed, specific training for the processes and procedures as we as for the specific toos to be utiized must be undertaken. A fu training program for a Forensic Anaysts and Investigators must be deveoped Maintaining Empoyee Competency The Laboratory Manager must monitor the skis and proficiency of the Forensic Anaysts on a continuing basis as we as on an annua basis as required by Human Resources procedures. The Forensic Laboratory has an ongoing program of training, awareness, and competency Empoyee Deveopment The Laboratory Manager must foster the deveopment of the Forensic Anaysts and Investigators for greater job responsibiity by supporting interna and externa training, providing sufficient ibrary resources to permit the Forensic Anaysts and Investigators to keep abreast of changing and emerging trends in forensic science, and encouraging them to do so. The Forensic Laboratory has an ongoing program of training, awareness, and competency Environment The Laboratory Manager must ensure that a safe and functiona work environment is provided with adequate space to support a the work activities required by the Forensic Laboratory. Faciities must be adequate so that evidence under the contro of the Forensic Laboratory is protected from contamination, tampering, or theft Supervision The Laboratory Manager must provide the Forensic Anaysts and Investigators with adequate supervisory review to ensure the quaity of their work product. The Laboratory Manager must be hed accountabe for the performance of the Forensic Anaysts and Investigators and the enforcement of cear and enforceabe processes and procedures. The Forensic Anaysts and Investigators shoud be hed to reaistic performance goas which take into account reasonabe workoad standards. The Laboratory Manager must ensure that the Forensic Anaysts and Investigators are not unduy pressured to perform substandard work through case oad pressure or unnecessary outside infuence. The Forensic Laboratory sha have in pace a performance evauation process Conficts of Interest The Laboratory Manager, the Forensic Anaysts, and the Investigators must avoid any activity, interest, or association that interferes or appears to interfere with their independent exercise of professiona judgment. The Forensic Laboratory Confict of Interest Poicy is given in Appendix Lega Compiance The Laboratory Manager sha estabish and pubish, with appropriate training, operationa procedures in order to meet good procedura, egisative, and good practice requirements.

4 28 Digita Forensics Processing and Procedures Accountabiity The Laboratory Manager and the Lead Forensic Anayst must be accountabe for their decisions and actions. These decisions and actions shoud be supported by appropriate documentation and be open to egitimate scrutiny Discosure and Discovery The Forensic Laboratory records must be open for reasonabe access when egitimate requests are made by Officers of the Court or other egitimate requesters. Specific requirements are necessary for the reease of unawfu materia Work Quaity The Laboratory Manager must estabish a quaity assurance program. The Forensic Anaysts and Investigators must accept responsibiity for evidence integrity and security; vaidated, reiabe methods; and casework documentation and reporting. The Forensic Laboratory compies with the requirements of ISO 9001 and ISO Accreditation and Certification The Laboratory Manager sha achieve and maintain whichever certifications and accreditation that the Top Management deem necessary Membership of Appropriate Organizations The Laboratory Manager sha ensure that the Forensic Team joins appropriate professiona organizations and that they are encouraged to obtain the highest professiona membership grade possibe Obtain Appropriate Persona Certifications The Laboratory Manager sha ensure that the Forensic Team achieves appropriate certifications of both generic and too-specific types to demonstrate their ski eves Laboratory Service Leve Agreements A Service Leve Agreement (SLA) is a part of a service contract where the eve of service that wi be provided by the digita forensics aboratory is formay defined. The SLA is sometimes used to refer to the contracted deivery time for the services offered by the Forensic Laboratory (usuay caed the Turn Round Time ) or the quaity of the work. The SLA shoud be considered from the start of the panning and deveopment process to ensure that the Forensic Laboratory wi be structured to the appropriate eve. Service providers normay incude SLAs within the terms of their contracts with customers to define the eve of service that is being provided in pain anguage using easiy understood terms. Any metrics incuded in a SLA must be measurabe and shoud be tested on a reguar basis. The SLA wi aso normay outine the remedia action and any penaties that wi take effect if the deivered service fas beow the defined standard. The SLA forms an essentia eement of the ega contract between the Forensic Laboratory and the customer. The actua structure of the SLA wi be dependent on the services offered by the Forensic Laboratory, but the genera structure of the agreement is as foows: contract; amendments; service description; service avaiabiity; reiabiity; customer support; service performance; change management procedures; security; service reviews; gossary; amendment sheet. If the Forensic Laboratory takes services from either an externa suppier (e.g., Internet Access or utiity suppier) or from the owning organization (e.g., human resources or ogistics), then suitabe SLAs wi need to be agreed with the service provider Impartiaity and Independence In order to obtain and retain accreditation to ISO (genera requirements for the competence of testing and caibration aboratories), there is a requirement for the Forensic Laboratory to be abe to show evidence that its work and resuts are free from undue infuence or pressure from customers or other interested parties and that aboratories working within arger organizations where infuence coud be appied (such as poice aboratories), are free from such infuence and are producing objective and vaid resuts. a Codes of Practice and Conduct In the United Kingdom, the Forensic Reguator has produced Codes of Practice and Conduct for forensic science a. UK House of Commons, Pubications on Science and Technoogy, 855/85506.htm#n129.

5 Chapter 3 Setting up the Forensic Laboratory 29 providers and practitioners in the Crimina Justice System. These Codes of Practice and Conduct were the first stage in the deveopment of a singe quaity standards framework for forensic science for use in the Crimina Justice System to repace the ad hoc approach to standards that had been used in the past. These Codes of Practice and Conduct were buit on the internationay recognized good practice of ISO as the preferred standard for forensic science aboratories. An appendix to these Codes of Practice and Conduct provides guidance to dea with the specific requirements for the providers of forensic science services at scenes of incidents based on ISO (genera criteria for the operation of various types of bodies performing inspection). This standard for inspection bodies is graduay being adopted across Europe as the most appropriate standard for crime scene investigations. The requirements that are described in the Codes of Practice and Conduct and the associated appendices are targeted at three eves: the organization: to outine what is required of it, particuary from the management, with regard to quaity assurance and compiance. Most forensic services are suppied by peope working in organizations and the organizationa cuture with regard to quaity is a major factor. Accountabiity for quaity rests with the management, and each organization is required to nominate a senior manager as the accountabe person ; the practitioner: to outine the professiona standards to which they are expected to perform; and the scientific methodoogy: to ensure that the methodoogy is robust and wi reiaby produce, and continue to produce, vaid resuts. These Codes of Practice and Conduct were deveoped so that they can be appied to a organizations and practitioners whose primary roe is the provision of forensic services into the Crimina Justice System in Engand and Waes. Whie these Codes of Practice and Conduct were designed for the UK community, they are based on sound principes and internationa standards, are a good guideine and a basis for codes of practice for other regions, and have been adopted by the Forensic Laboratory Quaity Standards Quaity standards in forensic science are essentia to ensure that the highest possibe standards are maintained by the Forensic Laboratory as a suppier of forensic services. This shoud incude resourcing, training, equipment, processes, and integrity benchmarks such as accreditation. Uness these standards are maintained, there is an increased possibiity that those guity of crimes may not be brought to justice or that those who are innocent may be convicted. Quaity standards in forensic science are best attained through accreditation to the internationa standard ISO 17025, which buids on the oder ISO 9001 standard. However, on its own, ISO wi not guarantee quaity, as it does not cover areas ike setting of the Forensic Laboratory strategy for a case, or the interpretation of the resuts, or the presentation of the evidence in the Court. A cross reference between ISO 9001 and ISO is given in Appendix 2. This ceary shows a cose correation, but ISO has more technica competences in it than ISO Objectivity A professiona Forensic Anayst or Investigator, when providing any service, must determine whether there are any threats to compiance with the fundamenta principe of objectivity. These threats wi normay resut from the Forensic Anayst, Investigator (or the Forensic Laboratory itsef) having interests in, or a reationship with any member of the Cient organization. An exampe of a famiiarity threat to objectivity coud be created from a famiy or cose persona or business reationship. Independence of thought is necessary to enabe the professiona Anayst or Investigator to express a concusion, without bias, confict of interest, or undue infuence from others. The existence of threats to objectivity when providing any professiona service wi depend upon the specific circumstances of the engagement and the nature of the work. A professiona Forensic Anayst or Investigator must evauate the significance of any threats and, when necessary, ensure that suitabe measures are taken to eiminate threats or reduce them to an acceptabe eve. Exampes of the types of measures that may be considered incude the foowing: advising the management of the Forensic Laboratory of the potentia threat; the Forensic Anayst or Investigator removing themseves from the case; the Forensic Laboratory having in pace suitabe peer review and supervisory procedures; terminating the reationship that gives rise to the threat. If the measures that have been put in pace to eiminate or reduce threats to an acceptabe eve are not effective, the Forensic Laboratory management must either decine or terminate the contract with the customer. The Forensic Laboratory Confict of Interest Poicy is given in Appendix Management Requirements There are many ways in which management requirements can be expressed. The Forensic Laboratory has impemented an Integrated Management System (IMS) based on the Pubicy Avaiabe Specification 99 (PAS 99). Fu detais of the IMS are given in Chapter 4.

6 30 Digita Forensics Processing and Procedures This has aowed the Forensic Laboratory to impement the foowing ISO standards: ISO Information and documentation Records management; ISO Conformity assessment Requirements for the operation of various types of bodies performing inspection; ISO Genera requirements for the competence of testing and caibration aboratories; ISO Societa security Business continuity management systems; ISO Information technoogy Security techniques Information security management systems Requirements; ISO 9001 Quaity management systems Requirements; OHSAS Occupationa Heath and Safety Management Systems; In-house digita forensic procedures Forensic Laboratory Poicies In order to assure the integrity of their resuts, the Forensic Laboratory must have appropriate poicies in pace. The impementation of these poicies wi be in the form of practices and procedures that define how the Forensic Laboratory wi operate to meet the reevant good practice and forensic science and quaity standards. The constant deveopments in technoogy mean that there is an ongoing need to update the poicies in order to meet changing aws and reguations in order to prevent unfairness and wrongfu conviction. The Forensic Laboratory poicies must ensure the integrity of any resuts produced. The main purpose of poicies within the Forensic Laboratory is to assure the integrity of resuts and to prevent miscarriages of justice. There are many exampes of mistakes within aboratories. One exampe is the anaysis of the data in the Casey Anthony tria in Juy 2011, when the number of times that she had accessed the internet to search for the word Choroform was initiay reported as 84 times but was ater found to be ony one time. b,c Another exampe is the CD Universe case where the evidence was compromised because the chain of custody was not propery estabished. d Poicies are aso necessary to ensure that the empoyees within the Forensic Laboratory receive and are abe to maintain a suitabe eve of training b. Forensic Data Recovery, Digita Evidence Discrepancies Casey Anthony Tria, Juy 11, 2011, p¼357. c. The State v. Casey Anthony: Anaysis of Evidence from the Case, Juy 18, 2011, d. CD Universe evidence compromised, and certification, and they shoud aso address funding eves and the poicy on investigation of aegations of misconduct or negigence. The poicies shoud aso contain sections on the code of ethics and the reevant standards and reguations Documentation Requirements The reevant standards impemented within the Forensic Laboratory wi dictate much of the required documentation for everyday operations. Documented procedures are incuded in the reevant chapters in this book Competence, Awareness, and Training A management standards have requirements for competence, awareness, and training. A Forensic Laboratory empoyees must aso be aware of cient requirements and the reevance of their activities. They shoud understand how their actions contribute to achieving the Forensic Laboratory s Quaity Poicy and objectives. This is normay achieved by awareness training, performance reviews, and empoyee participation in interna audit processes. Top Management shoud define the necessary skis, experience, and training required for each roe and identify the records of education, training, skis, and experience that need to be maintained. The Forensic Laboratory Quaity Poicy is given in Appendix Panning There are a number of actions that need to be taken throughout the panning process. These incude the foowing: Risk Assessment and Management A fundamenta eement of the panning process is the Risk Assessment. The objective of the Risk Assessment is to discover and document the current risks and threats to the business and to identify and impement measures to mitigate or reduce the risks that carry the highest probabiity of occurring or the highest impact. This Risk Assessment document shoud give guidance on how to conduct the Risk Assessment and aso how to evauate and anayze the information that is coected. It shoud aso contain guidance for the organization on how to impement strategies to manage the potentia risks. Risk Management in the Forensic Laboratory is covered in Chapter Business Impact Anaysis The Risk Assessment is ony one part of an overa Business Assessment. The Business Assessment is divided into

7 Chapter 3 Setting up the Forensic Laboratory 31 two parts, the Risk Assessment and a Business Impact Anaysis (BIA). The Risk Assessment is intended to measure the present risks and vunerabiities to the business s environment, whie the BIA evauates the probabe osses that coud occur as a resut of an incident. To maximize the vaue of a Risk Assessment, a BIA shoud aso be competed. A BIA is an essentia eement of an organization s business continuity pan. The BIA shoud incude an assessment of any vunerabiities and pans for the deveopment of strategies to minimize risk. The BIA describes the potentia risks to the organization studied and shoud identify the interdependencies between the different parts of the organization and which are the critica eements. For exampe, the Forensic Laboratory may be abe to continue to operate more or ess normay if the pumbing system faied but woud not be abe to function if the network faied. As part of a business continuity pan, the BIA shoud identify the probabe costs associated with faiures, such as oss of cash fow, cost of faciity repair, cost of equipment repacement, overtime payments to address the backog of work, oss of profits, etc. A BIA report shoud quantify the importance of the individua eements of the Forensic Laboratory and suggest appropriate eves of funding for measures to protect them. Potentia faiures shoud be assessed in terms of the financia cost and the impact on ega compiance, quaity assurance, and safety. Business Continuity is covered in Chapter Lega and Reguatory Considerations The investigation of crimes invoving digita media and the examination of that digita media in most countries are covered by both nationa and internationa egisation. In crimina investigations, nationa aws normay restrict how much information can be seized and under what circumstances it can be seized. For exampe, in the United Kingdom, the seizure of evidence by aw enforcement officers is governed by the Poice and Crimina Evidence Act (1984) and the Reguation of Investigatory Powers Act (2000) (RIPA). The Computer Misuse Act (1990) provides egisation regarding unauthorized access to computer materia, and this can affect the Investigator as we as the crimina and is a particuar concern for civi investigators who have more imitations on what they are aowed to do than aw enforcement officers. In the United States, one of the pieces of egisation that the investigator must be aware of is the rights of the individua under the Fourth Amendment, which imits the abiity of government agents to search for and seize evidence without a warrant. The Fourth Amendment states: The right of the peope to be secure in their persons, houses, papers, and effects, against unreasonabe searches and seizures, sha not be vioated, and no Warrants sha issue, but upon probabe cause, supported by Oath or affirmation, and particuary describing the pace to be searched, and the persons or things to be seized. According to OLE, e the Supreme Court stated that a seizure of property occurs when there is some meaningfu interference with an individua s possessory interests in that property, United States v. Jacobsen, 466 U.S. 109, 113 (1984), and the Court has aso characterized the interception of intangibe communications as a seizure. See Berger v. New York, 388 U.S. 41, (1967). Furthermore, the Court has hed that a search occurs when an expectation of privacy that society is prepared to consider reasonabe is infringed. Jacobsen, 466 U.S. at 113. OLE goes on to state that A search is constitutiona if it does not vioate a person s reasonabe or egitimate expectation of privacy. Katz v. United States, 389 U.S. 347, 361 (1967) (Haran, J., concurring). Another piece of egisation in the United States is the Patriot Act, which provides aw enforcement agents with an increased abiity to use surveiance toos such as roving wiretaps. The Patriot Act introduced important changes that have increased the prosecutoria power in fighting computer crimes. The Patriot Act references the Computer Fraud and Abuse Act (18 U.S.C. } 1030) with both procedura and substantive changes. There were aso changes to make it easier for aw enforcement to investigate computer crimes. Aso reevant piece of egisation in the United States is with regard to border searches. According to the Supreme Court, routine searches at the border do not require a warrant, probabe cause, or even reasonabe suspicion that the search may uncover contraband or evidence. Simiar to the UK s RIPA, since 1968, in the United States, the Wiretap Statute (Tite III), 18 U.S.C. }} has been the statutory framework used to contro the rea-time eectronic surveiance of communications. When aw enforcement officers want to pace a wiretap on a suspect s phone or monitor a hacker breaking into a computer system, they have to do so in compiance with the requirements of Tite III. The statute prohibits the use of eectronic, mechanica, or other devices to intercept a private wire, an ora, or eectronic communication between two parties uness one of a number of statutory exceptions appies. Tite III basicay prohibits eavesdropping (subject to certain exceptions and interstate requirements) by anyone, everywhere in the United States. e. Hagen E., Searching and Seizing Computers and Obtaining Eectronic Evidence in Crimina Investigations Computer Crime and Inteectua Property Section Crimina Division Pubished by Office of Lega Education, Executive Office for United States Attorneys.

8 32 Digita Forensics Processing and Procedures In the United States, the Eectronic Communications Privacy Act (ECPA) paces imitations on the abiity of Investigators to intercept and access potentia evidence. In Europe, Artice 5 of the European Convention on Human Rights gives simiar privacy imitations to the ECPA and imits the processing and sharing of persona data both within the EU and with other countries outside the EU. The Convention on Cybercrime (ETS No. 185), aso known as the Budapest Convention on Cybercrime, is an internationa treaty that was created to try to address the harmonization of nationa aws reating to computer crime and Internet crimes in order to improve the investigative techniques and increase cooperation between nations. The Convention was adopted by the Committee of Ministers of the Counci of Europe on November 8, 2001 and was opened for signature in Budapest, ater that month. The convention entered into force on Juy 1, 2004 and by the end of 2010, 30 states had signed, ratified, and acceded to the convention. These incuded Canada, Japan, the United States, and the Repubic of South Africa. A further 16 countries have aso signed the convention but not yet ratified it. The Convention is the ony binding internationa instrument deaing with cybercrime. The Internationa Organization on Computer Evidence is an organization that was estabished in 1999 and has been working to estabish compatibe internationa standards for the seizure of evidence to guarantee the abiity to use digita evidence coected by one state in the Courts of another state. In civi investigations, the reevant aws of many countries restrict the actions that the Investigator can undertake in an examination. Reguations that are in pace with regard to network monitoring and the accessing of persona communications or data stored in the network exist in many countries, and the rights of an individua to privacy is sti an area which is sti subject to decisions in the Courts. This is intended ony to highight the range of aws and reguations that the Investigator wi need to be aware of and that the Forensics Laboratory wi need to ensure that have been taken into account when deveoping the guideines for operationa processes and procedures Insurance The Forensic Laboratory must reguary review its insurance coverage to ensure that it is appropriate for the types of insurance required in the jurisdiction and at a eve commensurate with the business undertaken, specific contractua requirements, and the number of empoyees Contingency Panning This is activity that is undertaken to ensure that suitabe and immediate steps can be taken by management and staff in the event of an emergency. The main objectives of contingency panning are to ensure the containment of the incident and to imit any damage or injury or oss and to ensure the continuity of the key operations of the organization. The contingency pan identifies the immediate actions that shoud be taken and aso the onger-term measures for responding to incidents. The process of deveoping the contingency pan invoves the identification of critica resources and functions and the estabishment of a recovery pan that is based on the ength of time that the enterprise can operate without specific functions. The pan wi be a iving document and wi need to be continuousy updated to keep pace with changes in reguations, the environment, and the work taking pace within the Forensic Laboratory. The contingency pan wi need to be documented in straightforward terms and tested at reguar intervas to ensure that it is effective and that a of the parties invoved understand their roes and responsibiities. Contingency pans are part of business continuity panning. Business Continuity is covered in Chapter Roes and Responsibiities The roes of a Forensic Laboratory empoyees must be defined together with the responsibiities that are reated to that roe. Specific job roes are given in the reevant chapters reating to the impemented management systems Business Objectives It is common for business objectives to be set in financia terms; however, not a objectives have to be expressed in these terms. Ideay objectives shoud adhere to the SMART acronym, which describes five characteristics: S Specific; M Measurabe; A Achievabe; R Reaistic; T Time Bound. Objectives coud incude the foowing: desired throughput and profit eves; amount of income generated; vaue of the business or dividends paid to sharehoders; quaity of customer service; innovation.

9 Chapter 3 Setting up the Forensic Laboratory Laboratory Accreditation and Certification Accreditation is something that the Forensic Laboratory wi normay aspire to achieve at the eariest opportunity. The most widey recognized accreditation is ISO Once accreditation has been achieved, the activities of the Forensic Laboratory wi be monitored on a periodic basis by the reevant accreditation body. Once it has been achieved, the Forensic Laboratory must compy with specific criteria reating to the aboratory s management and operations, personne, and physica pant in order to maintain its accreditation. The criteria and standards address the areas of aboratory administrative practices, procedures, training, evidence handing, quaity contro, anaysis protocos, testimony, proficiency testing, personne quaifications, space aocation, security, and a number of other topics. The issue of aboratory accreditation and certification is deat with in much greater detai in Chapter Poicies The Forensic Laboratory has deveoped poicies that contain cear statements covering a of the major forensic issues, incuding subcontracting; contacting aw enforcement; carrying out monitoring; and conducting reguar reviews of forensic poicies, guideines, and procedures. At the top eve, the Forensic Laboratory s poicies must ony aow authorized personne to carry out their tasks which may incude monitoring systems and networks and performing investigations. The Forensic Laboratory may aso need a separate poicy to cover incident handers and other forensic roes. There is a requirement for the poicies to be reviewed and updated at frequent intervas because of changes in technoogy or changes to aws and reguations, as we as to take account of new court ruings. The Forensic Laboratory case handing poicies must aso be consistent with other poicies, incuding poicies reated to privacy Guideines and Procedures The Forensic Laboratory has deveoped and maintains guideines and procedures for carrying out a tasks reating to processing forensic cases and management systems. These sha be based on the parent organizations poicies (if there is a parent organization), consistent with them and a appicabe aws. The Forensic Laboratory s forensic guideines sha incude genera guideines for investigations and sha aso incude step-by-step procedures for performing the routine tasks, such as the imaging of a hard disk or the capturing of voatie data from ive systems. The reason for deveoping these guideines and procedures is that they wi hep to ensure that there is consistency in the way in which materia is processed. This wi ead to good practices and a consistent approach to tasks within the Forensic Laboratory and wi ensure that the cases are a processed to the same standard whether it is anticipated that they wi go to the Court or not. It wi aso ensure that evidence coected, for exampe, for a case that starts off as an interna discipinary action into computer misuse, can be used if it discovered that there was a more serious crime that may ead to a prosecution. By using guideines and poicies to ensure consistency, the integrity of any data that is used or resuts that are created can be demonstrated. The guideines and procedures wi support the admissibiity of any evidence produced in the aboratory into ega proceedings. If tasks are outsourced to externa third parties, the way in which the Forensic Laboratory engages with the third party and the way in which they are engaged and the materia that is provided to them and recovered from them sha be described in the guideines and poicies. Normay, when a third party carries out work in behaf of the Forensic Laboratory, the contract with the third party wi require that they adhere to the Forensic Laboratory s handing and processing standards. The process of outsourcing is covered in Chapter 14. Once the guideines and procedures have been deveoped, it is important that they are reguary reviewed and maintained so that they remain accurate and represent the current aws, technoogy, and good practice. The frequency with which they are reviewed and updated wi be determined by Top Management and shoud be reguar but may aso be infuenced by changes in the reevant aws or technoogies. APPENDIX 1 - THE FORENSIC LABORATORY TOR THE VISION A short statement, normay of one or two paragraphs, which expains the mandate given to the team and defines the reason for the Forensic Laboratory s creation and its purpose. SCOPE AND OBJECTIVES It is essentia to define the scope of the work that is to be conducted by the Forensic Laboratory. The ToR shoud specify the work to be undertaken and the types of deiverabes from this work. It shoud aso give timescaes for the production of deiverabes.

10 34 Digita Forensics Processing and Procedures DELIVERABLES The deiverabes of the Forensic Laboratory shoud be defined. This shoud not ony incude the outcome of the investigations but aso the interna deiverabes such as accounts, audits, and test resuts and reports. BOUNDARIES, RISKS, AND LIMITATIONS This section describes where the process/system/operation of the Forensic Laboratory starts and ends. A statement of the authority deegated to the Forensic Laboratory to impement change and any powers given to it shoud be incuded. It is in this section that the systems, poicies, procedures, reevant egisation, etc., shoud be mentioned. The risks shoud aso be detaied. ROLES, RESPONSIBILITIES, AUTHORITY, ACCOUNTABILITY, AND REPORTING REQUIREMENTS The Forensic Laboratory poicy shoud ceary define the roes and responsibiities of a peope working within the Forensic Laboratory. It sha detai the roes, responsibiities, and functions of each empoyee and ceary define the authority that is associated with each of the roes. It shoud aso define the accountabiity associated with each of the roes and the reporting requirements for each roe and task. It sha incude the actions to be performed during both routine work activities and an incident. The poicy sha ceary indicate who is responsibe for, and authorized to contact which interna teams and externa organizations and under what circumstances. STAKEHOLDERS It is important to identify the main stakehoders and their interests, roes, and responsibiities. The stakehoders wi incude the representatives of the owning organization, Forensic Laboratory empoyees, Cients and may extend to other parties who have an interest in the efficient running of the Forensic Laboratory. REGULATORY FRAMEWORK The ega, institutiona, and contractua framework for the operation of the Forensic Laboratory needs to be stated. This shoud incude reguations of regiona bodies such as the European Union, Federa (Nationa), State (Provincia), or Municipa Governments, and any egisation or poicies and practices that pertain to parent corporations, partnerships, etc. RESOURCES The resources identified shoud incude rea estate, empoyees, equipment, and support services. The eements that need to be considered wi incude the foowing: administrative support; avaiabe budget; empoyees; materias and suppies; other supporting functions (e.g., security); resources avaiabe and how they are to be accessed; information processing equipment (business and forensic); training requirements and how this wi be provided. WORK BREAKDOWN STRUCTURE AND SCHEDULE The work breakdown structure is a ist of tasks that require action. When the individua tasks are considered together with reevant dependencies and timeines are introduced, then the schedue is created. The work that is to be undertaken by the Forensic Laboratory is broken down into smaer and smaer tasks that eventuay become the work breakdown structure. Additiona detais of task durations and dependencies wi be required to aid in the buiding of the schedue. SUCCESS FACTORS Success Factors (SFs), aso sometimes referred to as Critica Success Factors, are the measure of those factors or activities required for ensuring the success of the Forensic Laboratory. They are used to identify a sma number of key factors that the Forensic Laboratory wi need to focus on to be successfu. SFs are important as they are things that are capabe of being measured and because of this they get done more often than things that are not measured. Each SF shoud be measurabe and associated with a target goa. Primary measures that shoud be incuded are aspects such as success eves for areas such as the number of jobs processed in the month and number of hours spent on each task. SFs shoud be identified for any of the aspects of the business that are identified as vita for defined targets to be reached and maintained. SFs are normay identified in such areas as aboratory processes, staff and organization skis, toos, techniques, and technoogies. SFs wi inevitaby change over time as the business undertaken by the aboratory changes. INTERVENTION STRATEGIES These shoud cover the contingency pans for any emergency and shoud define what constitutes an emergency.

11 Chapter 3 Setting up the Forensic Laboratory 35 APPENDIX 2 - CROSS REFERENCE BETWEEN ISO 9001 AND ISO ISO 9001 ISO Cause 1 Cause 1 Cause 2 Cause 2 Cause 3 Cause , 4.1.1, 4.1.2, 4.1.3, 4.1.4, 4.1.5, 4.2, 4.2.1, 4.2.2, 4.2.3, , 4.2.3, , 4.2.3, , , a) 4.1.2, b) c) d) e) a) b) c) d) e) c) a) b) a), f), h) i) a) i) b) c) a) b) 4.4.1, 4.7, 5.4.2, 5.4.3, 5.4.4, ISO 9001 ISO a) 5.2.2, b) 5.2.1, c) d) k) e) a) 4.1.3, , , b) , , 5.5, c) 4.6, 5.5.6, , 5.8, , 5.3.2, 5.3.3, 5.3.4, a) b) a), 4.2.1, c) 5.4, d) 4.1, 5.4, , 4.4.2, 4.4.3, 4.4.4, 4.4.5, 5.4, 5.9, , 4.4.2, 4.4.3, 4.4.4, 4.4.5, 5.4, 5.9, , 4.4.4, 4.5, 4.7, , 5.4, , 4.6.2, , 5.2, 5.4, 5.5, 5.6, 5.7, 5.8, , 5.4.2, c), , 4.12, 5.8, , , 5.4, , , 4.14, , 4.6, 4.9, 5.5.2, 5.5.9, 5.8, 5.8.3, 5.8.4, , , , , 4.11, 4.12 Continued

12 36 Digita Forensics Processing and Procedures APPENDIX 3 - CONFLICT OF INTEREST POLICY This poicy describes the Forensic Laboratory Confict of Interest Poicy for a work undertaken, incuding digita forensics, genera management consutancy, and reguatory work. There is no right or wrong approach to handing potentia conficts of interest. Utimatey, the issue is about the appication of common sense within a egisative, reguatory, contractua, or ethica framework. The key principes to any effective poicy are as foows: Define a confict of interest in reation to the Forensic Laboratory: Woud there have to be some persona financia or other interest for a Forensic Laboratory empoyee for a confict of interest to be considered, or woud historica connection to the beneficiary of a decision be sufficient to trigger the procedures; Consider the future ikeihood of such conficts: Is the confict of interest ikey to be exceptiona in which case the empoyee s membership of the decision-making body is unprobematic, or woud it be so frequent that it might be best to consider aternative membership of the counci; Agree the method of decaring an interest: This may be a written decaration competed annuay before undertaking a task (project, case, etc.) or may be prior to a meeting, etc.; Agree the method of addressing the confict: Again, there are numerous ways of addressing a confict of interest. The empoyee in question might absent themseves competey from a consideration or they may participate in the discussion but not the decision. Each case wi be decided on the factors invoved; It is the Forensic Laboratory s poicy to have an open, transparent, fair, objective, customer-focused, yet accountabe process for any possibe confict of interest. The Forensic Laboratory owes contractua duties, as we as a duty of care, to a of its Cients, and this must be observed and compied with, as we as be seen to be observed and compied with; The aim of this poicy is to protect the Forensic Laboratory and a empoyees from the appearance of an impropriety; At the start of any the Forensic Laboratory case or assignment, the empoyees invoved must consider the scope of the assignment and consider if they have now, in the past, or in the foreseeabe future, any possibe conficts of interest reating to the assignment. These may arise from such issues as: persona, or famiia invovement, with someone who is invoved in the management of the contract of the assignment; persona, or famiia invovement, with someone who is the subject of a forensic case or assignment; a breach of the code of ethics of any professiona organization of the organization that any empoyee on the case or assignment may beong to or be bound by; the offer (or acceptance) of any inducement; hospitaity; or gift that may impair, imit the extent, rigor, or objectivity in the performance of the assignment, case, or project; having a financia interest in the outcome of the case or assignment; impaired decisions or actions that may not be in the best interest of the Forensic Laboratory s Cient or the Court; a perception that the Forensic Laboratory or its empoyees are acting impropery because of a perceived confict of interest. Where a possibe confict is identified after the start of any assignment, it must be brought to the attention of the Laboratory Manager, who has accountabiity and responsibiity for Compiance and Governance, as soon as is practicaby possibe, and within 24 hours at the maximum. As soon as the confict is identified, the empoyee shoud excuse themseves from any decision taking unti the confict has been resoved. In some cases, it wi be necessary for the empoyee to excuse themseves from any work on the case or assignment. This is specificay the case for forensic work and may be appicabe in other assignments, as identified. In some cases, a Decaration of Interest Form wi be required to be executed before each assignment, and in other cases, an annua (or reguar) decaration wi be required. Where a confict is decared to the Laboratory Manager, they wi take such action as they see fit to both decare and resove the confict. This may (and probaby wi) invove communication with the other parties in the case or assignment. A discussions and decisions sha be regarded as records and be retained and secured appropriatey. A possibe or actua conficts of interest sha be investigated thoroughy, quicky, impartiay, and a reevant parties sha be advised of the outcome. A review of a conficts and possibe conficts is undertaken at Management Reviews. This poicy is issued and maintained by the Laboratory Manager, who aso provides advice and guidance on its impementation and ensures compiance. A the Forensic Laboratory empoyees sha compy with this poicy. APPENDIX 4 - QUALITY POLICY The Forensic Laboratory is committed to good quaity practice. The objective for a empoyees is to perform their

Internal Control. Guidance for Directors on the Combined Code

Internal Control. Guidance for Directors on the Combined Code Interna Contro Guidance for Directors on the Combined Code ISBN 1 84152 010 1 Pubished by The Institute of Chartered Accountants in Engand & Waes Chartered Accountants Ha PO Box 433 Moorgate Pace London

More information

Australian Bureau of Statistics Management of Business Providers

Australian Bureau of Statistics Management of Business Providers Purpose Austraian Bureau of Statistics Management of Business Providers 1 The principa objective of the Austraian Bureau of Statistics (ABS) in respect of business providers is to impose the owest oad

More information

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES The Eectronic Fund Transfers we are capabe of handing for consumers are indicated beow, some of which may not appy your account Some of these

More information

DOING BUSINESS WITH THE REGION OF PEEL A GUIDE FOR NEW AND CURRENT VENDORS

DOING BUSINESS WITH THE REGION OF PEEL A GUIDE FOR NEW AND CURRENT VENDORS DOING BUSINESS WITH THE REGION OF PEEL A GUIDE FOR NEW AND CURRENT VENDORS TABLE OF CONTENTS INTRODUCTION... 1 GOVERNANCE... 1 COMMONLY PURCHASED GOODS AND SERVICES... 1 HOW TO REGISTER YOUR COMPANY...

More information

Teamwork. Abstract. 2.1 Overview

Teamwork. Abstract. 2.1 Overview 2 Teamwork Abstract This chapter presents one of the basic eements of software projects teamwork. It addresses how to buid teams in a way that promotes team members accountabiity and responsibiity, and

More information

World Accreditation Day

World Accreditation Day Word Accreditation Day 9 June 2016 www.pubicsectorassurance.org Accreditation: A goba too to support Pubic Poicy Accreditation: A goba too to support Pubic Poicy Standards, accreditation and conformity

More information

LADDER SAFETY Table of Contents

LADDER SAFETY Table of Contents Tabe of Contents SECTION 1. TRAINING PROGRAM INTRODUCTION..................3 Training Objectives...........................................3 Rationae for Training.........................................3

More information

SABRe B2.1: Design & Development. Supplier Briefing Pack.

SABRe B2.1: Design & Development. Supplier Briefing Pack. SABRe B2.1: Design & Deveopment. Suppier Briefing Pack. 2013 Ros-Royce pc The information in this document is the property of Ros-Royce pc and may not be copied or communicated to a third party, or used

More information

professional indemnity insurance proposal form

professional indemnity insurance proposal form professiona indemnity insurance proposa form Important Facts Reating To This Proposa Form You shoud read the foowing advice before proceeding to compete this proposa form. Duty of Discosure Before you

More information

3.3 SOFTWARE RISK MANAGEMENT (SRM)

3.3 SOFTWARE RISK MANAGEMENT (SRM) 93 3.3 SOFTWARE RISK MANAGEMENT (SRM) Fig. 3.2 SRM is a process buit in five steps. The steps are: Identify Anayse Pan Track Resove The process is continuous in nature and handed dynamicay throughout ifecyce

More information

Accreditation: Supporting the Delivery of Health and Social Care

Accreditation: Supporting the Delivery of Health and Social Care Accreditation: Supporting the Deivery of Heath and Socia Care PHARMACY E F P T O L P E D P E C M F D T G L E F R Accreditation: Supporting the Deivery of Heath and Socia Care June 9, 2015 marks Word Accreditation

More information

PREFACE. Comptroller General of the United States. Page i

PREFACE. Comptroller General of the United States. Page i - I PREFACE T he (+nera Accounting Office (GAO) has ong beieved that the federa government urgenty needs to improve the financia information on which it bases many important decisions. To run our compex

More information

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES. l l

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES. l l ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES The Eectronic Fund Transfers we are capabe of handing for consumers are indicated beow some of which may not appy your account Some of these may

More information

Qualifications, professional development and probation

Qualifications, professional development and probation UCU Continuing Professiona Deveopment Quaifications, professiona deveopment and probation Initia training and further education teaching quaifications Since September 2007 a newy appointed FE ecturers,

More information

Certified Once Accepted Everywhere Why use an accredited certification body?

Certified Once Accepted Everywhere Why use an accredited certification body? Certified Once Accepted Everywhere Why use an accredited certification body? Third party management systems certification is a frequenty specified requirement to operate in the goba market pace. It can

More information

Introduction the pressure for efficiency the Estates opportunity

Introduction the pressure for efficiency the Estates opportunity Heathy Savings? A study of the proportion of NHS Trusts with an in-house Buidings Repair and Maintenance workforce, and a discussion of eary experiences of Suppies efficiency initiatives Management Summary

More information

ICAP CREDIT RISK SERVICES. Your Business Partner

ICAP CREDIT RISK SERVICES. Your Business Partner ICAP CREDIT RISK SERVICES Your Business Partner ABOUT ICAP GROUP ICAP Group with 56 miion revenues for 2008 and 1,000 empoyees- is the argest Business Services Group in Greece. In addition to its Greek

More information

IT Governance Principles & Key Metrics

IT Governance Principles & Key Metrics IT Governance Principes & Key Metrics Smawood Maike & Associates, Inc. 9393 W. 110th Street 51 Corporate Woods, Suite 500 Overand Park, KS 66210 Office: 913-451-6790 Good governance processes that moves

More information

Learning from evaluations Processes and instruments used by GIZ as a learning organisation and their contribution to interorganisational learning

Learning from evaluations Processes and instruments used by GIZ as a learning organisation and their contribution to interorganisational learning Monitoring and Evauation Unit Learning from evauations Processes and instruments used by GIZ as a earning organisation and their contribution to interorganisationa earning Contents 1.3Learning from evauations

More information

ELECTRONIC FUND TRANSFERS. l l l. l l. l l l. l l l

ELECTRONIC FUND TRANSFERS. l l l. l l. l l l. l l l Program Organization = Number "1060" = Type "123342" = "ETM2LAZCD" For = "502859" "TCCUS" "" Name "WK Number = Name "First "1001" = "1" Eectronic = "1001" = Financia "Jane Funds Doe" Northwest Xfer PG1

More information

Business schools are the academic setting where. The current crisis has highlighted the need to redefine the role of senior managers in organizations.

Business schools are the academic setting where. The current crisis has highlighted the need to redefine the role of senior managers in organizations. c r o s os r oi a d s REDISCOVERING THE ROLE OF BUSINESS SCHOOLS The current crisis has highighted the need to redefine the roe of senior managers in organizations. JORDI CANALS Professor and Dean, IESE

More information

Corporate Governance f o r M a i n M a r k e t a n d a i M C o M p a n i e s

Corporate Governance f o r M a i n M a r k e t a n d a i M C o M p a n i e s Corporate Governance f o r M a i n M a r k e t a n d a i M C o M p a n i e s 23. Corporate governance towards best-practice corporate reporting John Patterson, PricewaterhouseCoopers LLP Reporting is

More information

CERTIFICATE COURSE ON CLIMATE CHANGE AND SUSTAINABILITY. Course Offered By: Indian Environmental Society

CERTIFICATE COURSE ON CLIMATE CHANGE AND SUSTAINABILITY. Course Offered By: Indian Environmental Society CERTIFICATE COURSE ON CLIMATE CHANGE AND SUSTAINABILITY Course Offered By: Indian Environmenta Society INTRODUCTION The Indian Environmenta Society (IES) a dynamic and fexibe organization with a goba vision

More information

Message. The Trade and Industry Bureau is committed to providing maximum support for Hong Kong s manufacturing and services industries.

Message. The Trade and Industry Bureau is committed to providing maximum support for Hong Kong s manufacturing and services industries. Message The Trade and Industry Bureau is committed to providing maximum support for Hong Kong s manufacturing and services industries. With the weight of our economy shifting towards knowedge-based and

More information

ASSET MANAGEMENT OUR APPROACH

ASSET MANAGEMENT OUR APPROACH ASSET MANAGEMENT OUR APPROACH CONTENTS FOREWORD 3 INTRODUCTION 4 ASSET MANAGEMENT? 6 THE NEED FOR CHANGE 6 KEY PRINCIPLES 7 APPENDIX 1 19 GLOSSARY 20 2 FOREWORD Few things affect our customers ives as

More information

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES. l l

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES. l l ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES The Eectronic Fund Transfers we are capabe of handing for consumers are indicated beow some of which may not appy your account Some of these may

More information

STRATEGIC PLAN 2012-2016

STRATEGIC PLAN 2012-2016 STRATEGIC PLAN 2012-2016 CIT Bishopstown CIT Cork Schoo of Music CIT Crawford Coege of Art & Design Nationa Maritime Coege of Ireand Our Institute STRATEGIC PLAN 2012-2016 Cork Institute of Technoogy (CIT)

More information

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES. l l. l l. l l. l l

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES. l l. l l. l l. l l ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES The Eectronic Fund Transfers we are capabe of handing for consumers are indicated beow some of which may not appy your account Some of these may

More information

CONTRIBUTION OF INTERNAL AUDITING IN THE VALUE OF A NURSING UNIT WITHIN THREE YEARS

CONTRIBUTION OF INTERNAL AUDITING IN THE VALUE OF A NURSING UNIT WITHIN THREE YEARS Dehi Business Review X Vo. 4, No. 2, Juy - December 2003 CONTRIBUTION OF INTERNAL AUDITING IN THE VALUE OF A NURSING UNIT WITHIN THREE YEARS John N.. Var arvatsouakis atsouakis DURING the present time,

More information

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES. l l l. l l

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES. l l l. l l ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES The Eectronic Fund Transfers we are capabe of handing for consumers are indicated beow, some of which may not appy your account Some of these

More information

The BBC s management of its Digital Media Initiative

The BBC s management of its Digital Media Initiative The BBC s management of its Digita Media Initiative Report by the Comptroer and Auditor Genera presented to the BBC Trust s Finance and Compiance Committee, 13 January 2011 Department for Cuture, Media

More information

Frequently Asked Questions

Frequently Asked Questions Community Heathcare Organisations Report & Recommendations of the Integrated Service Area Review Group Frequenty Asked Questions 1. What are Community Heathcare Services? Community Heathcare Services are

More information

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES About ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES The Eectronic Fund Transfers we are capabe of handing for consumers are indicated beow, some of which may not appy your account. Some of

More information

Human Capital & Human Resources Certificate Programs

Human Capital & Human Resources Certificate Programs MANAGEMENT CONCEPTS Human Capita & Human Resources Certificate Programs Programs to deveop functiona and strategic skis in: Human Capita // Human Resources ENROLL TODAY! Contract Hoder Contract GS-02F-0010J

More information

How To Deiver Resuts

How To Deiver Resuts Message We sha make every effort to strengthen the community buiding programme which serves to foster among the peope of Hong Kong a sense of beonging and mutua care. We wi continue to impement the District

More information

DECEMBER 2008. Good practice contract management framework

DECEMBER 2008. Good practice contract management framework DECEMBER 2008 Good practice contract management framework The Nationa Audit Office scrutinises pubic spending on behaf of Pariament. The Comptroer and Auditor Genera, Tim Burr, is an Officer of the House

More information

FINANCIAL ACCOUNTING

FINANCIAL ACCOUNTING FINANCIAL ACCOUNTING Part 1 A conceptua framework: setting the scene 1 Who needs accounting? 2 A systematic approach to financia reporting: the accounting equation 3 Financia statements from the accounting

More information

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES. l l l

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES. l l l ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES The Eectronic Fund Transfers we are capabe of handing for consumers are indicated beow, some of which may not appy your account Some of these

More information

Network/Communicational Vulnerability

Network/Communicational Vulnerability Automated teer machines (ATMs) are a part of most of our ives. The major appea of these machines is convenience The ATM environment is changing and that change has serious ramifications for the security

More information

APPENDIX 10.1: SUBSTANTIVE AUDIT PROGRAMME FOR PRODUCTION WAGES: TROSTON PLC

APPENDIX 10.1: SUBSTANTIVE AUDIT PROGRAMME FOR PRODUCTION WAGES: TROSTON PLC Appendix 10.1: substantive audit programme for production wages: Troston pc 389 APPENDIX 10.1: SUBSTANTIVE AUDIT PROGRAMME FOR PRODUCTION WAGES: TROSTON PLC The detaied audit programme production wages

More information

COASTLINE GROUP HUMAN RESOURCES STRATEGY 2015 2017. Great homes, great services, great people.

COASTLINE GROUP HUMAN RESOURCES STRATEGY 2015 2017. Great homes, great services, great people. COASTLINE GROUP HUMAN RESOURCES STRATEGY 2015 2017 Great homes, great services, great peope. Contents Foreword 2 Executive summary 1. Achievements 5 2. Context 7 3. Our peope 9.Objectives 11 5. What we

More information

Niagara Catholic. District School Board. High Performance. Support Program. Academic

Niagara Catholic. District School Board. High Performance. Support Program. Academic Niagara Cathoic District Schoo Board High Performance Academic Support Program The Niagara Cathoic District Schoo Board, through the charisms of faith, socia justice, support and eadership, nurtures an

More information

Specification of fibre raw material. For the documentation of fibre raw material:

Specification of fibre raw material. For the documentation of fibre raw material: Appendix 1A Specification of fibre raw materia Suppier: Product: Manufacturer/suppier: For the documentation of fibre raw materia: Type of wood/pant and geographica origin (country/state and region/ province).

More information

Income Protection Solutions. Policy Wording

Income Protection Solutions. Policy Wording Income Protection Soutions Poicy Wording Wecome to Aviva This booket tes you a you need to know about your poicy, incuding: what to do if you need to caim what s covered, and expanations of some of the

More information

A Description of the California Partnership for Long-Term Care Prepared by the California Department of Health Care Services

A Description of the California Partnership for Long-Term Care Prepared by the California Department of Health Care Services 2012 Before You Buy A Description of the Caifornia Partnership for Long-Term Care Prepared by the Caifornia Department of Heath Care Services Page 1 of 13 Ony ong-term care insurance poicies bearing any

More information

Overview of Health and Safety in China

Overview of Health and Safety in China Overview of Heath and Safety in China Hongyuan Wei 1, Leping Dang 1, and Mark Hoye 2 1 Schoo of Chemica Engineering, Tianjin University, Tianjin 300072, P R China, E-mai: david.wei@tju.edu.cn 2 AstraZeneca

More information

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES. l l. l l

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES. l l. l l ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES The Eectronic Fund Transfers we are capabe of handing for consumers are indicated beow some of which may not appy your account Some of these may

More information

Strengthening Human Resources Information Systems: Experiences from Bihar and Jharkhand, India

Strengthening Human Resources Information Systems: Experiences from Bihar and Jharkhand, India Strengthening Human Resources Information Systems: Experiences from Bihar and Jharkhand, India Technica Brief October 2012 Context India faces critica human resources (HR) chaenges in the heath sector,

More information

Leadership & Management Certificate Programs

Leadership & Management Certificate Programs MANAGEMENT CONCEPTS Leadership & Management Certificate Programs Programs to deveop expertise in: Anaytics // Leadership // Professiona Skis // Supervision ENROLL TODAY! Contract oder Contract GS-02F-0010J

More information

A Guide to Understanding the Implications of the Ionising Radiation (Medical Exposure) Regulations in Radiotherapy

A Guide to Understanding the Implications of the Ionising Radiation (Medical Exposure) Regulations in Radiotherapy IPEM A Guide to Understanding the Impications of the Ionising Radiation (Medica Exposure) Reguations in Radiotherapy The Society and Coege of Radiographers The Roya Coege of Radioogists Institute of Physics

More information

Via Federal Express WARNING LETTER Center for Devices and Radiological Health 2098 Gaither Road Rockville. MD 20850

Via Federal Express WARNING LETTER Center for Devices and Radiological Health 2098 Gaither Road Rockville. MD 20850 DEPARTMENI OF HEALTH & HUMAN SERVICES Pubic Heath Service Stephen Smith IV, M.D., Chair Kaweah Deta Heath Care District Institutiona Review Committee 400 West Minera King 119 Visaia, Caifornia 9329 1 Dear

More information

Oracle Project Financial Planning. User's Guide Release 11.1.2.2

Oracle Project Financial Planning. User's Guide Release 11.1.2.2 Orace Project Financia Panning User's Guide Reease 11.1.2.2 Project Financia Panning User's Guide, 11.1.2.2 Copyright 2012, Orace and/or its affiiates. A rights reserved. Authors: EPM Information Deveopment

More information

Early access to FAS payments for members in poor health

Early access to FAS payments for members in poor health Financia Assistance Scheme Eary access to FAS payments for members in poor heath Pension Protection Fund Protecting Peope s Futures The Financia Assistance Scheme is administered by the Pension Protection

More information

endorsed programmes With our expertise and unique flexible approach NOCN will work with you to develop a product that achieves results.

endorsed programmes With our expertise and unique flexible approach NOCN will work with you to develop a product that achieves results. endorsed programmes With our expertise and unique fexibe approach NOCN wi work with you to deveop a product that achieves resuts. NOCN is a eading reguated UK awarding organisation that has been creating

More information

INDUSTRIAL PROCESSING SITES COMPLIANCE WITH THE NEW REGULATORY REFORM (FIRE SAFETY) ORDER 2005

INDUSTRIAL PROCESSING SITES COMPLIANCE WITH THE NEW REGULATORY REFORM (FIRE SAFETY) ORDER 2005 INDUSTRIAL PROCESSING SITES COMPLIANCE WITH THE NEW REGULATORY REFORM (FIRE SAFETY) ORDER 2005 Steven J Manchester BRE Fire and Security E-mai: manchesters@bre.co.uk The aim of this paper is to inform

More information

Program Management Seminar

Program Management Seminar Program Management Seminar Program Management Seminar The word s best management schoos are noted for their superior program execution, high eves of customer satisfaction, and continuous program improvements.

More information

Incident management system for the oil and gas industry. Good practice guidelines for incident management and emergency response personnel

Incident management system for the oil and gas industry. Good practice guidelines for incident management and emergency response personnel Incident management system for the oi and gas industry Good practice guideines for incident management and emergency response personne The goba oi and gas industry association for environmenta and socia

More information

1. Executive Summary: The Need for Supply-Chain Risk Management

1. Executive Summary: The Need for Supply-Chain Risk Management 1 1. Executive Summary: The Need for Suppy-Chain Risk Management Modern enterprises increasingy find themseves reying on others for their success. Historicay, enterprises have spent ess than a third of

More information

Management Accounting

Management Accounting Management Accounting Course Text Professiona, Practica, Proven www.accountingtechniciansireand.ie Tabe of Contents FOREWORD...v SYLLABUS: MANAGEMENT ACCOUNTING...vii PART 1 INTRODUCTION Chapter 1: Introduction

More information

8x8 Webinar: Prepare Now to Survive a Disaster

8x8 Webinar: Prepare Now to Survive a Disaster 8x8 Webinar: Prepare Now to Survive a Disaster Later January 23, 2013 2009 NASDAQ-LISTED: EGHT The materias presented in the webinar provided by 8x8, Inc. are intended to provide genera information on

More information

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES. l l. l l. l l

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES. l l. l l. l l ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES The Eectronic Fund Transfers we are capabe of handing for consumers are indicated beow, some of which may not appy your account Some of these

More information

Order-to-Cash Processes

Order-to-Cash Processes TMI170 ING info pat 2:Info pat.qxt 01/12/2008 09:25 Page 1 Section Two: Order-to-Cash Processes Gregory Cronie, Head Saes, Payments and Cash Management, ING O rder-to-cash and purchase-topay processes

More information

Safety Simplified TERZETTO PHARMA METRICS PVT. LTD., Contact Safety Organisation

Safety Simplified TERZETTO PHARMA METRICS PVT. LTD., Contact Safety Organisation Safety Simpified TERZETTO PHARMA METRICS PVT. LTD., Contact Safety Organisation Specific soutions to monitor the safety of the drugs a over the gobe About us We provide specific soutions to monitor the

More information

Federal Financial Management Certificate Program

Federal Financial Management Certificate Program MANAGEMENT CONCEPTS Federa Financia Management Certificate Program Training to hep you achieve the highest eve performance in: Accounting // Auditing // Budgeting // Financia Management ENROLL TODAY! Contract

More information

Integrating Risk into your Plant Lifecycle A next generation software architecture for risk based

Integrating Risk into your Plant Lifecycle A next generation software architecture for risk based Integrating Risk into your Pant Lifecyce A next generation software architecture for risk based operations Dr Nic Cavanagh 1, Dr Jeremy Linn 2 and Coin Hickey 3 1 Head of Safeti Product Management, DNV

More information

DRIVING UNDER THE INFLUENCE ACT

DRIVING UNDER THE INFLUENCE ACT Driving Under the Infuence Act 13 MIRC Ch.3 TITLE 13 MOTOR VEHICLES CHAPTER 3 - DRIVING UNDER THE INFLUENCE s Repubic of the Marsha Isands Jepipiin Ke Ejukaan DRIVING UNDER THE INFLUENCE ACT Arrangement

More information

CI/SfB Ro8. (Aq) September 2012. The new advanced toughened glass. Pilkington Pyroclear Fire-resistant Glass

CI/SfB Ro8. (Aq) September 2012. The new advanced toughened glass. Pilkington Pyroclear Fire-resistant Glass CI/SfB Ro8 (Aq) September 2012 The new advanced toughened gass Pikington Pyrocear Fire-resistant Gass Pikington Pyrocear, fire-resistant screens in the façade: a typica containment appication for integrity

More information

Corporate Governance. f o r M a i n M a r k e t a n d a i M C o M p a n i e s

Corporate Governance. f o r M a i n M a r k e t a n d a i M C o M p a n i e s Corporate Governance f o r M a i n M a r k e t a n d a i M C o M p a n i e s The London Stock Exchange woud ike to thank the foowing organisations for their contributions to this guide: Corporate Governance

More information

Avaya Remote Feature Activation (RFA) User Guide

Avaya Remote Feature Activation (RFA) User Guide Avaya Remote Feature Activation (RFA) User Guide 03-300149 Issue 5.0 September 2007 2007 Avaya Inc. A Rights Reserved. Notice Whie reasonabe efforts were made to ensure that the information in this document

More information

Degree Programs in Environmental Science/Studies

Degree Programs in Environmental Science/Studies State University Memorandum of New York to Presidents Date: June 30, 2000 Vo. 00 No. I From: Office of the Provost and Vice Chanceor for Academic Affairs SLbject: Guideines for the Consideration o New

More information

your statement of insurance

your statement of insurance your statement of insurance Schoo - Winter Trave Insurance poicyhoder: STG issued on: 1st February 2013 poicy number: NS9 0001313 reason for issue: new business This Statement of Insurance forms part of

More information

A short guide to making a medical negligence claim

A short guide to making a medical negligence claim A short guide to making a medica negigence caim Introduction Suffering from an incident of medica negigence is traumatic and can have a serious ong-term impact on both the physica and menta heath of affected

More information

PENALTY TAXES ON CORPORATE ACCUMULATIONS

PENALTY TAXES ON CORPORATE ACCUMULATIONS H Chapter Six H PENALTY TAXES ON CORPORATE ACCUMULATIONS INTRODUCTION AND STUDY OBJECTIVES The accumuated earnings tax and the persona hoding company tax are penaty taxes designed to prevent taxpayers

More information

FLAC Legal Divorce v2 band_layout 1 26/06/2014 20:01 Page 1 July 2014 divorce

FLAC Legal Divorce v2 band_layout 1 26/06/2014 20:01 Page 1 July 2014 divorce Juy 2014 divorce Divorce has been avaiabe in the Repubic of Ireand since 1997. Once a divorce is obtained, the parties (the ex-spouses) are free to remarry or enter into a civi partnership. Famiy Law (Divorce)

More information

Budgeting Loans from the Social Fund

Budgeting Loans from the Social Fund Budgeting Loans from the Socia Fund tes sheet Pease read these notes carefuy. They expain the circumstances when a budgeting oan can be paid. Budgeting Loans You may be abe to get a Budgeting Loan if:

More information

Key Features and Terms & Conditions of the Stocks & Shares Junior ISA

Key Features and Terms & Conditions of the Stocks & Shares Junior ISA June 2013 Key Features and Terms & Conditions of the This document shoud be read in conjunction with an up-to-date Key Investor Information Document (KIID) for the fund in which you want to invest. You

More information

Business Banking. A guide for franchises

Business Banking. A guide for franchises Business Banking A guide for franchises Hep with your franchise business, right on your doorstep A true understanding of the needs of your business: that s what makes RBS the right choice for financia

More information

Example of Credit Card Agreement for Bank of America Visa Signature and World MasterCard accounts

Example of Credit Card Agreement for Bank of America Visa Signature and World MasterCard accounts Exampe of Credit Card Agreement for Bank of America Visa Signature and Word MasterCard accounts PRICING INFORMATION Actua pricing wi vary from one cardhoder to another Annua Percentage Rates for Purchases

More information

July 2014. separation

July 2014. separation Juy 2014 separation When a marriage breaks down, the coupe can arrange for a forma separation. The coupe may eventuay decide to divorce (see separate information eafet on Divorce). There are two different

More information

Tackling external fraud

Tackling external fraud Good practice in tacking externa fraud Xxxxxxxxxxx GOOD PRACTICE GUIDE Tacking externa fraud Good practice in tacking externa fraud Xxxxxxxxxxx The Nationa Audit Office scrutinises pubic spending on behaf

More information

Creative learning through the arts an action plan for Wales

Creative learning through the arts an action plan for Wales Creative earning through the arts an action pan for Waes 2015 2020 Audience The entire teaching workforce and government and nationa partners, incuding regiona education consortia, oca authorities, governing

More information

Professional Kingston

Professional Kingston Professiona Kingston Organisationa and workforce deveopment soutions n Facuty of Business and Law Aways improving 0/1 Contents Wecome 2 Why Kingston? 4 Course portfoio 6 Course detais 8 Work-based earning

More information

IMPORTERS and FILERS: FOOD SECURITY PREVENTIVE MEASURES GUIBANCE

IMPORTERS and FILERS: FOOD SECURITY PREVENTIVE MEASURES GUIBANCE GUIDANCE OR INDUSTRY IMPORTERS and FILERS: FOOD SECURITY PREVENTIVE MEASURES GUIBANCE This guidance represents the Agency s current thinking on appropriatezili, measures that can be taken by food estabtishments

More information

APIS Software Training /Consulting

APIS Software Training /Consulting APIS Software Training /Consuting IQ-Software Services APIS Informationstechnoogien GmbH The information contained in this document is subject to change without prior notice. It does not represent any

More information

Value For Money in public sector corporate services. A joint project by the UK Public Sector Audit Agencies

Value For Money in public sector corporate services. A joint project by the UK Public Sector Audit Agencies Vaue For Money in pubic sector corporate services A joint project by the UK Pubic Sector Audit Agencies N I A O Northern Ireand Audit Office vfm in pubic sector corporate services 1 Joint foreword by audit

More information

Oracle. L. Ladoga Rybinsk Res. Volga. Finland. Volga. Dnieper. Dnestr. Danube. Lesbos. Auditing Oracle Applications Peloponnesus

Oracle. L. Ladoga Rybinsk Res. Volga. Finland. Volga. Dnieper. Dnestr. Danube. Lesbos. Auditing Oracle Applications Peloponnesus N o r w e g i a n S e a White 60ûN ATLANTIC OCEAN UNITED KINGDOM Rio Douro Hebrid Bay of Biscay Garonne Faroe Isands Shetand Isands Orkney Isands North Loire ine Rhone Rhine Po Ebe Adriatic Batic Guf of

More information

The Productive Therapist and The Productive Clinic Peter R. Kovacek, MSA, PT

The Productive Therapist and The Productive Clinic Peter R. Kovacek, MSA, PT The Productive Therapist and The Productive Cinic Peter R. Kovacek, MSA, PT Format Interactive Discussions among equa peers Constructive argument Reaity Oriented Mutua Accountabiity Expectation Panning

More information

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES

ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES ELECTRONIC FUND TRANSFERS YOUR RIGHTS AND RESPONSIBILITIES The Eectronic Fund Transfers we are capabe of handing for consumers are indicated beow, some of which may not appy your account Some of these

More information

NatWest Global Employee Banking Eastwood House Glebe Road Chelmsford Essex England CM1 1RS Depot Code 028

NatWest Global Employee Banking Eastwood House Glebe Road Chelmsford Essex England CM1 1RS Depot Code 028 To appy for this account, the printed appication must be competed and returned together with any necessary supporting documentation to the foowing address: NatWest Goba Empoyee Banking Eastwood House Gebe

More information

College of Registered Psychiatric Nurses of British Columbia. Guidelines Registered Psychiatric Nurses in Independent Practice

College of Registered Psychiatric Nurses of British Columbia. Guidelines Registered Psychiatric Nurses in Independent Practice Coege of Registered Psychiatric Nurses of British Coumbia Guideines Registered Psychiatric Nurses in Independent Practice March 27, 2008 Tabe of Contents Introduction and Background...page 2 Definition

More information

Older people s assets: using housing equity to pay for health and aged care

Older people s assets: using housing equity to pay for health and aged care Key words: aged care; retirement savings; reverse mortgage; financia innovation; financia panning Oder peope s assets: using housing equity to pay for heath and aged care The research agenda on the ageing

More information

Open University of Mauritius - Essentials of Occupational Safety & Health

Open University of Mauritius - Essentials of Occupational Safety & Health 2 Open University of Mauritius - Essentias of Occupationa Safety & Heath Essentias of Occupationa Safety and Heath OUbe020314 / OUbe019112 i 3 Open University of Mauritius - Essentias of Occupationa Safety

More information

... HSA ... Health Savings Account. Custodial. (includes self-direction)

... HSA ... Health Savings Account. Custodial. (includes self-direction) HSA Heath Savings Account Custodia (incudes sef-direction) ADDITIONAL INFORMATION Purpose This Organizer contains documents necessary to estabish a Heath Savings Account (HSA) It meets the requirements

More information

Nordic Ecolabelling of Copy and printing paper - supplementary module

Nordic Ecolabelling of Copy and printing paper - supplementary module rdic Ecoabeing of Copy and printing paper - suppementary modue Version 4.1 22 June 2011 30 June 2016 rdic Ecoabeing Content What is rdic Ecoabeed copy and printing paper? 3 Why choose the rdic Ecoabe?

More information

Industry guidance document Checkout workstations in retail - safe design and work practices

Industry guidance document Checkout workstations in retail - safe design and work practices Industry guidance document Checkout workstations in retai - safe design and work practices Industry guidance document Checkout workstations in retai - safe design and work practices WorkSafe Contents Foreword...

More information

SNMP Reference Guide for Avaya Communication Manager

SNMP Reference Guide for Avaya Communication Manager SNMP Reference Guide for Avaya Communication Manager 03-602013 Issue 1.0 Feburary 2007 2006 Avaya Inc. A Rights Reserved. Notice Whie reasonabe efforts were made to ensure that the information in this

More information

Sage Accounts Production Range

Sage Accounts Production Range Sage Accounts Production Range The abiity to dri-down from the face of the accounts makes reviewing accounts so easy. Sage Accounts Production Software As individua as you and your cients Jim O Leary,

More information

l l ll l l Exploding the Myths about DETC Accreditation A Primer for Students

l l ll l l Exploding the Myths about DETC Accreditation A Primer for Students Expoding the Myths about DETC Accreditation A Primer for Students Distance Education and Training Counci Expoding the Myths about DETC Accreditation: A Primer for Students Prospective distance education

More information

A guide to listing on the London Stock Exchange

A guide to listing on the London Stock Exchange A guide to isting on the London Stock Exchange Pubished by White Page Ltd in association with the London Stock Exchange, with contributions from: Pubishing editor: Nige Page Pubisher: Tim Dempsey Design:

More information

Education Quality Improvement Framework

Education Quality Improvement Framework Education Quaity Improvement Framework for Undergraduate and Postgraduate Medica Education and Training in the UK The duties of a doctor registered with the Genera Medica Counci Patients must be abe to

More information