A Novel Digital Forensic Readiness (DFR) Framework for e-Government

The increasing reliance on e-Government services has amplified the importance of digital forensic readiness (DFR) in ensuring effective incident response to mitigate the impact of cyber incidents. A specialized DFR framework would streamline incident response procedures within e-Government services, facilitating prompt identification, containment, and remediation of cyber threats. One of the most notable characteristics of DFR for e-Government is the implementation of a formal policy on forensic readiness. This paper proposes novel DFR steps to guide the formulation of such a policy. The proposed framework is tailored by combining two DFR frameworks that Claims and Elyas et al. contributed. The new framework involves identifying crucial DFR parameters and mapping domain parameters between both frameworks. The framework was then implemented in a local government organization in West Java, Indonesia. The result is a security policy recommendation for Digital Forensic Readiness, which consists of 8 domains and 33 subdomains. The security policy provides a practical approach to enhance the DFR capabilities of e-Government services to enhance incident response and cyber resilience.