SlideShare a Scribd company logo
3
Most read
4
Most read
7
Most read
Electronic Discovery The EDRM - modified CTIN - November 2008
What is EDRM?  Electronic Discovery Reference Model WIP e-discovery (ESI) standards Focus on consumers and vendors Can influence judiciary and court rules (civil and criminal) Covers Paper and Digital Records Classifies 3 metadata types File system  Document (embedded) Email
IT and Forensics Legal Team
Information Mgmt, Identification, Preservation, Collection The previous presenters just covered those!
Processing (Paper and Digital) Metrics assessment  How much data, data types, deadlines, staffing, vendors, budget, etc. 70-80% of litigation cost is typically discovery, mostly review Review platform assessment Co-counsel, reviewers, deposition access, client, experts (limited access),  trial access , etc.  Popular web-based platforms include iCONECT Popular in-house or web platforms include Concordance and Summation Paper processing Generally involves scanning, unitization, OCR, Bates numbers, coding, and load files Popular tools include iPro, Doculex, LAW, Nuix & ImageMaker (pay-per-click) Quality control OCR
Processing (Paper and Digital) Digital email and documents Load native files direct into Concordance, Summation, etc. Parse last 10 authors   De-duping and culling (initial or secondary after collection) De-dupe within or across custodians, by hash, Message ID, visual (paper), other Culling by date, folder, type, etc. Quality control and chain of custody QC metadata during copying/transfer
Concordance Metadata Parsing Accessed Date -Omitted
iPro Metadata Parsing
Review Protocols Coding manual, workflow, key words, concept searching, redaction, privilege logs, QC, etc. Database types Email, documents, transcripts, production, expert, other  Database configurations Fields, folders, tags, user permissions, backups, etc. Staffing  Paralegals, associates, IT, interns, temps  In-house vs. outsourced Billable hour vs. fixed price per doc Domestic vs. off-shore
Review Review for relevance and privilege (first pass) Reporting Perform redaction Maintain unredacted copies separately “ Burn-in”  image redaction  Redact OCR
Production Forms of production  Per Meet & Confer Metadata, native files, TIFF, PDF, OCR Redacted material requires special production handling  Privilege log, QC, etc. Single or rolling production  Per Meet & Confer, court order, budget management, tactical, etc.
Production Media types CD/DVDs, external drives, etc. Metadata preservation during transfer
Analysis Incorporate other case materials  RFA, interrogatories, deposition transcripts, expert reports, pleadings/motions, news items, websites, research, YouTube, etc.  Focusing and enhancing review (second pass)  Reporting Update protocols, modify staffing,  focus   issues   and search parameters, categorize “hot docs”, etc.
Analysis Visualization Data mapping, timelines, etc. CaseMap, TimeMap, Analyst’s Notebook, Nuix, etc.
Presentation (Trial and ADR) Identify key case material  Usually less than 5% of original discovery Limit number of issues for jury Transfer key material to presentation tool(s) Video deposition and transcript synching  Sanction, Trial Director, Visionary, PowerPoint, etc.
Free presentation software  Visionary is built on MS Access  Use with Concordance & Summation load files, linked as viewer, or standalone Organize documents, audio, video, transcripts, etc.  Network capable www.freevisionary.com
 
 
 
 
 
 
 
Questions?  Chris Brown, CFE  Electronic Discovery and Fraud Consultant

More Related Content

PDF
Data recovery and Digital evidence controls in digital frensics.pdf
PPTX
Introduction to filesystems and computer forensics
PPTX
Tintas.impresiones
PDF
01 Computer Forensics Fundamentals - Notes
PDF
Incident response methodology
PDF
Introduction to Digital Forensics and Evidences Aquasation.pdf
PPTX
connecte hardware peripherals level 1.ppt.pptx
Data recovery and Digital evidence controls in digital frensics.pdf
Introduction to filesystems and computer forensics
Tintas.impresiones
01 Computer Forensics Fundamentals - Notes
Incident response methodology
Introduction to Digital Forensics and Evidences Aquasation.pdf
connecte hardware peripherals level 1.ppt.pptx

What's hot (20)

PPTX
Computer forensics toolkit
PPT
Tema documentologia
PPT
Linux forensics
PPTX
Poligrafía Forense.pptx
PPTX
Reseña historica de la criminalistica, nathaly camacaro saia i
PPTX
Data recovery tools
PDF
Digital Forensic: Brief Intro & Research Challenge
PDF
DevSecOps - Workshop do Bem
PDF
Computer forensics and Investigation
PPTX
Data Acquisition
PPTX
Building an Analytics - Enabled SOC Breakout Session
PDF
CMD Command prompts
PPTX
Antropología forense
PPSX
Cloud Forensics
PPTX
Top 10 it security architect interview questions and answers
PDF
Informatica forense
PPT
Digital Evidence - the defence, prosecution, & the court
PPTX
Cybercrime And Cyber forensics
PDF
Business case for information security program
PDF
LTEC 2013 - EnCase v7.08.01 presentation
Computer forensics toolkit
Tema documentologia
Linux forensics
Poligrafía Forense.pptx
Reseña historica de la criminalistica, nathaly camacaro saia i
Data recovery tools
Digital Forensic: Brief Intro & Research Challenge
DevSecOps - Workshop do Bem
Computer forensics and Investigation
Data Acquisition
Building an Analytics - Enabled SOC Breakout Session
CMD Command prompts
Antropología forense
Cloud Forensics
Top 10 it security architect interview questions and answers
Informatica forense
Digital Evidence - the defence, prosecution, & the court
Cybercrime And Cyber forensics
Business case for information security program
LTEC 2013 - EnCase v7.08.01 presentation
Ad

Viewers also liked (20)

PPT
Installation of Joomla on Windows XP
PDF
Digital forensic upload
PPT
Unit B Windows 7
PPTX
Open Source Forensics
PDF
2010 2013 sandro suffert memory forensics introdutory work shop - public
PDF
Windows 8.x Forensics 1.0
PDF
Windows logging cheat sheet
PPT
Vista Forensics
PDF
Forensic Anaysis on Twitter
ODP
Introduction to memory forensics
PPTX
Mounting virtual hard drives
PPT
Part6 Private Sector Concerns
PPT
Windows forensic artifacts
PPT
Computer Forensics & Windows Registry
PDF
NTFS Forensics
PPTX
Windows 7 forensics jump lists-rv3-public
PDF
Windows 7 forensics -overview-r3
PDF
Become an Internet Sleuth!
PPTX
Windows 10 Forensics: OS Evidentiary Artefacts
PPT
Corporate Public Investigations
Installation of Joomla on Windows XP
Digital forensic upload
Unit B Windows 7
Open Source Forensics
2010 2013 sandro suffert memory forensics introdutory work shop - public
Windows 8.x Forensics 1.0
Windows logging cheat sheet
Vista Forensics
Forensic Anaysis on Twitter
Introduction to memory forensics
Mounting virtual hard drives
Part6 Private Sector Concerns
Windows forensic artifacts
Computer Forensics & Windows Registry
NTFS Forensics
Windows 7 forensics jump lists-rv3-public
Windows 7 forensics -overview-r3
Become an Internet Sleuth!
Windows 10 Forensics: OS Evidentiary Artefacts
Corporate Public Investigations
Ad

Similar to Edrm (20)

PPT
Ctin Ediscovery
PPT
CTIN EDiscovery
PPT
Digitisation Workshop Pres 2008(V1)
PPT
Karomi Project Document Control
PPTX
Digitisation workshop pres 2009(v1)
PPTX
AZ to eDiscovery
PPTX
eDiscovery A-Z - June 2011
PPT
E-Disccovery Best Practices 20090710 Ver02
PPT
Enterprise Discovery: Taking Control, Driving Change
PPT
Records Management - The Art of Throwing Things Away - Alfresco Software
PPT
Understanding EDP (Electronic Data Processing) Environment
PPT
20110414 ARMA Twin Cities Inventorying Electronic Records
PDF
Digital Documentation content for class X
PPT
Presentation on digital documentation
PDF
Etmf in the fast lane
PPS
STL LItigation Services
PPT
Digital Destiny
PPT
Icai effective usage of audit working papers 20.07.2013
Ctin Ediscovery
CTIN EDiscovery
Digitisation Workshop Pres 2008(V1)
Karomi Project Document Control
Digitisation workshop pres 2009(v1)
AZ to eDiscovery
eDiscovery A-Z - June 2011
E-Disccovery Best Practices 20090710 Ver02
Enterprise Discovery: Taking Control, Driving Change
Records Management - The Art of Throwing Things Away - Alfresco Software
Understanding EDP (Electronic Data Processing) Environment
20110414 ARMA Twin Cities Inventorying Electronic Records
Digital Documentation content for class X
Presentation on digital documentation
Etmf in the fast lane
STL LItigation Services
Digital Destiny
Icai effective usage of audit working papers 20.07.2013

More from CTIN (20)

PDF
Encase V7 Presented by Guidance Software august 2011
PDF
Windows 7 forensics event logs-dtl-r3
PPTX
Msra 2011 windows7 forensics-troyla
PPTX
Windows 7 forensics thumbnail-dtl-r4
PPTX
Time Stamp Analysis of Windows Systems
PPT
Mac Forensics
PPT
Nra
PPT
Live Forensics
PPT
Translating Geek To Attorneys It Security
PPT
Computer Searchs, Electronic Communication, Computer Trespass
PPT
CyberCrime
PPT
Search Warrants
PDF
Sadfe2007
PPT
Raidprep
PPT
Networking Overview
PPT
M Compevid
PPT
L Scope
PPT
Level1 Part8 End Of The Day
PPT
Law Enforcement Role In Computing
PPT
Level1 Part7 Basic Investigations
Encase V7 Presented by Guidance Software august 2011
Windows 7 forensics event logs-dtl-r3
Msra 2011 windows7 forensics-troyla
Windows 7 forensics thumbnail-dtl-r4
Time Stamp Analysis of Windows Systems
Mac Forensics
Nra
Live Forensics
Translating Geek To Attorneys It Security
Computer Searchs, Electronic Communication, Computer Trespass
CyberCrime
Search Warrants
Sadfe2007
Raidprep
Networking Overview
M Compevid
L Scope
Level1 Part8 End Of The Day
Law Enforcement Role In Computing
Level1 Part7 Basic Investigations

Recently uploaded (20)

PDF
NewMind AI Weekly Chronicles - August'25-Week II
PPTX
Tartificialntelligence_presentation.pptx
PDF
Encapsulation theory and applications.pdf
PPTX
1. Introduction to Computer Programming.pptx
PDF
From MVP to Full-Scale Product A Startup’s Software Journey.pdf
PPTX
KOM of Painting work and Equipment Insulation REV00 update 25-dec.pptx
PDF
Web App vs Mobile App What Should You Build First.pdf
PDF
Accuracy of neural networks in brain wave diagnosis of schizophrenia
PDF
Hindi spoken digit analysis for native and non-native speakers
PPTX
Programs and apps: productivity, graphics, security and other tools
PDF
project resource management chapter-09.pdf
PDF
DP Operators-handbook-extract for the Mautical Institute
PDF
Getting Started with Data Integration: FME Form 101
PDF
7 ChatGPT Prompts to Help You Define Your Ideal Customer Profile.pdf
PDF
Enhancing emotion recognition model for a student engagement use case through...
PDF
Video forgery: An extensive analysis of inter-and intra-frame manipulation al...
PDF
ENT215_Completing-a-large-scale-migration-and-modernization-with-AWS.pdf
PPTX
cloud_computing_Infrastucture_as_cloud_p
PDF
Heart disease approach using modified random forest and particle swarm optimi...
PDF
MIND Revenue Release Quarter 2 2025 Press Release
NewMind AI Weekly Chronicles - August'25-Week II
Tartificialntelligence_presentation.pptx
Encapsulation theory and applications.pdf
1. Introduction to Computer Programming.pptx
From MVP to Full-Scale Product A Startup’s Software Journey.pdf
KOM of Painting work and Equipment Insulation REV00 update 25-dec.pptx
Web App vs Mobile App What Should You Build First.pdf
Accuracy of neural networks in brain wave diagnosis of schizophrenia
Hindi spoken digit analysis for native and non-native speakers
Programs and apps: productivity, graphics, security and other tools
project resource management chapter-09.pdf
DP Operators-handbook-extract for the Mautical Institute
Getting Started with Data Integration: FME Form 101
7 ChatGPT Prompts to Help You Define Your Ideal Customer Profile.pdf
Enhancing emotion recognition model for a student engagement use case through...
Video forgery: An extensive analysis of inter-and intra-frame manipulation al...
ENT215_Completing-a-large-scale-migration-and-modernization-with-AWS.pdf
cloud_computing_Infrastucture_as_cloud_p
Heart disease approach using modified random forest and particle swarm optimi...
MIND Revenue Release Quarter 2 2025 Press Release

Edrm

  • 1. Electronic Discovery The EDRM - modified CTIN - November 2008
  • 2. What is EDRM? Electronic Discovery Reference Model WIP e-discovery (ESI) standards Focus on consumers and vendors Can influence judiciary and court rules (civil and criminal) Covers Paper and Digital Records Classifies 3 metadata types File system Document (embedded) Email
  • 3. IT and Forensics Legal Team
  • 4. Information Mgmt, Identification, Preservation, Collection The previous presenters just covered those!
  • 5. Processing (Paper and Digital) Metrics assessment How much data, data types, deadlines, staffing, vendors, budget, etc. 70-80% of litigation cost is typically discovery, mostly review Review platform assessment Co-counsel, reviewers, deposition access, client, experts (limited access), trial access , etc. Popular web-based platforms include iCONECT Popular in-house or web platforms include Concordance and Summation Paper processing Generally involves scanning, unitization, OCR, Bates numbers, coding, and load files Popular tools include iPro, Doculex, LAW, Nuix & ImageMaker (pay-per-click) Quality control OCR
  • 6. Processing (Paper and Digital) Digital email and documents Load native files direct into Concordance, Summation, etc. Parse last 10 authors De-duping and culling (initial or secondary after collection) De-dupe within or across custodians, by hash, Message ID, visual (paper), other Culling by date, folder, type, etc. Quality control and chain of custody QC metadata during copying/transfer
  • 7. Concordance Metadata Parsing Accessed Date -Omitted
  • 9. Review Protocols Coding manual, workflow, key words, concept searching, redaction, privilege logs, QC, etc. Database types Email, documents, transcripts, production, expert, other Database configurations Fields, folders, tags, user permissions, backups, etc. Staffing Paralegals, associates, IT, interns, temps In-house vs. outsourced Billable hour vs. fixed price per doc Domestic vs. off-shore
  • 10. Review Review for relevance and privilege (first pass) Reporting Perform redaction Maintain unredacted copies separately “ Burn-in” image redaction Redact OCR
  • 11. Production Forms of production Per Meet & Confer Metadata, native files, TIFF, PDF, OCR Redacted material requires special production handling Privilege log, QC, etc. Single or rolling production Per Meet & Confer, court order, budget management, tactical, etc.
  • 12. Production Media types CD/DVDs, external drives, etc. Metadata preservation during transfer
  • 13. Analysis Incorporate other case materials RFA, interrogatories, deposition transcripts, expert reports, pleadings/motions, news items, websites, research, YouTube, etc. Focusing and enhancing review (second pass) Reporting Update protocols, modify staffing, focus issues and search parameters, categorize “hot docs”, etc.
  • 14. Analysis Visualization Data mapping, timelines, etc. CaseMap, TimeMap, Analyst’s Notebook, Nuix, etc.
  • 15. Presentation (Trial and ADR) Identify key case material Usually less than 5% of original discovery Limit number of issues for jury Transfer key material to presentation tool(s) Video deposition and transcript synching Sanction, Trial Director, Visionary, PowerPoint, etc.
  • 16. Free presentation software Visionary is built on MS Access Use with Concordance & Summation load files, linked as viewer, or standalone Organize documents, audio, video, transcripts, etc. Network capable www.freevisionary.com
  • 17.  
  • 18.  
  • 19.  
  • 20.  
  • 21.  
  • 22.  
  • 23.  
  • 24. Questions? Chris Brown, CFE Electronic Discovery and Fraud Consultant