CIS 440 - e-Discovery Infrastructure and Practice

5 Credits

E-Discovery is becoming more and more commonplace as 90% of all documents are electronic. In this course, students learn the methodology behind e-discovery including documents, mobile devices, email and logfiles. Proper procedures such as the Electronic Discovery Reference Model (EDRM) are covered. Popular commercial tools such as Sherpa Software, iPro and Summation are examined along with shareware/freeware. Students learn the laws that may affect them as network administrators during a litigation hold and how to develop procedures for various legal situations that may affect the digital data they maintain. They learn how to create a business infrastructure that can respond effectively to e-discovery issues. This is a hands-on class in which they will use the techniques introduced. Students will have taken CIS 155 or its equivalent.

Pre-requisite(s) CIS 155 min 2.0
Program Admission Required Yes Admitted Program BAS - CIS
FeesCF

Quarters Typically Offered
Fall Evening
Winter Evening
Designed to Serve For students admitted to the BAS program in CyberSecurity and Forensics.
Active Date 20200330T21:14:49

Grading Basis Decimal Grade
Class Limit 24
Shared Learning Environment Yes
Contact Hours: Lecture 44 Lab 22
Total Contact Hours 66
Degree Distributions:
ProfTech Course Yes
Restricted Elective Yes
Course Outline

Describe the difference between e-discovery and digital forensics
- Describe the types of digital evidence
Explain how the following rules affect digital evidence
- Federal Rules of Civil Procedure
- Federal Rules of Criminal Procedure
- Federal Rules of Evidence
Use the Electronic Discovery Reference Model
Use the FIRAC legal analysis method to read a case
Describe and use some of the popular e-discovery tools
- Explain how they are used in conjunction with forensics tools
- Explain planning considerations
- Itemize the types of e-discovery items useful in court
Describe the role of experts in civil and criminal cases
- Explain the role of an e-discovery expert
- Explain and contrast the role of a digital forensics expert
- Describe best practices
Explain how to preserve digital evidence
- Use of web based repositories
- Other software tools
Describe case flow
- Prelitigation procedures
- Common documents used at the start of a lawsuit
- Fact finding and pretrial
- Common technical and non-technical considerations
Describe Information Governance and how it affects the collection of evidence
Describe the appeals process
- Case law
- Criminal vs. civil case law
- Multijurisdictional and international cases
Describe new trends.
- Their implications

Student Learning Outcomes
Explain the difference between e-discovery and digital forensics.

Explain how the rules of evidence, criminal and civil procedure affect digital evidence.

Evaluate cases using tools such as the Electronic Discovery Reference Model and FIRAC method.

Effectively use the various features of commercial and open source e-discovery software to evaluate digital case evidence.

Explain how information governance and management affects the collection and retention of evidence.

Discern different roles of experts in the e-discovery and digital forensics fields for civil and criminal cases.