ISO/IEC 27037

    Also known as: evidence collection guideline

    International standard giving guidelines for the identification, collection, acquisition and preservation of digital evidence.

    The standard describes roles (first responder, specialist), principles (relevance, reliability, sufficiency) and procedures for evidence handling across device types. It dates from 2012 and covers cloud and IoT only inadequately – a gap the European Union Agency for Law Enforcement Cooperation (incl. EC3) (Europol) report states explicitly. As a reference for policies and provider contracts it remains the accepted yardstick.