# Digital Forensics Readiness Assessment

> From $32K · Managed Security & Incident Response · https://cisomarketplace.services/services/digital-forensics-readiness-assessment

Comprehensive evaluation of your organization's ability to collect, preserve, and analyze digital evidence following security incidents. Our assessment examines logging configurations, evidence collection processes, and forensic capabilities to ensure your organization can support investigations, legal proceedings, and regulatory requirements.

## In scope

- Log retention configuration
- Evidence collection procedures
- Forensic tool evaluation
- Chain of custody processes
- Digital evidence preservation capabilities
- Memory capture mechanisms
- Network traffic recording
- Legal hold procedures
- Forensic investigation playbooks
- Insider threat investigation capabilities

## Deliverables

- Forensic readiness report
- Logging enhancement recommendations
- Evidence collection framework
- Chain of custody procedures
- Forensic tool recommendations
- Investigation playbook development
- Training recommendations for IT staff
- Legal and regulatory compliance guidance

## Tiers

### Essential Forensic Readiness Review: $32K

Up to 250 employees and 1 site. Reviews log retention on up to 10 critical log sources, evidence collection and chain of custody practice, and current forensic tooling. Readiness report with logging and evidence collection recommendations.

Limits: employees 250, locations 1

Includes:
- Log retention review for up to 10 critical sources
- Evidence collection and chain of custody process review
- Forensic tool evaluation
- Forensic readiness report
- Logging enhancement recommendations

Excludes:
- Writing evidence collection procedures
- Investigation playbooks
- Memory capture and network recording capability review
- Legal hold process design

### Comprehensive Forensic Readiness Program: $55K

Up to 1,000 employees and up to 3 sites, up to 25 log sources. Adds memory capture and network traffic recording review, and we write the evidence collection framework, chain of custody procedures and 5 investigation playbooks including insider threat.

Limits: employees 1000, locations 3

Includes:
- Everything in the readiness review
- Memory capture and network recording capability review
- Evidence collection framework and chain of custody procedures
- 5 investigation playbooks (including insider threat)
- Training recommendations for IT staff

Excludes:
- Custom collection scripts or tooling
- Logging infrastructure design
- Legal hold process integration with counsel
- Performing an actual investigation

### Enterprise Forensic Investigation Framework: $85K

Up to 2,500 employees and up to 10 sites, up to 50 log sources. Adds custom evidence collection scripts for your platforms, a target logging architecture for forensic retention, 10 playbooks, and legal hold procedures designed with your counsel.

Limits: employees 2500, locations 10

Includes:
- Everything in the standard tier
- Custom evidence collection scripts
- Target logging architecture for forensic retention
- 10 investigation playbooks
- Legal hold procedures and regulatory evidence guidance

Excludes:
- Deploying logging infrastructure or buying tools
- Incident response or forensic investigation retainer
- Legal advice (provided by the client's counsel)
- Organizations above 2,500 employees (scoped separately)

## Terms

Starting price shown is the lowest published tier. A written proposal fixes scope, tier and price before anything is signed. Timeline is set in the SOW.

Scope this engagement: https://cisomarketplace.services/scope?service=digital-forensics-readiness-assessment