Evaluation and Analysis of a Digital Forensic Readiness Framework for the IIoT

Digital Forensic Readiness (DFR) is a significant need to facilitate effective incident response in Industrial Internet of Things (IIoT) networks. However, existing frameworks often lack specificity for IIoT environments. In this paper, we develop and implement a criteria for evaluation of a novel DFR frame-work for the IIoT. We evaluate its effectiveness by aligning it with ISO/IEC 27043:2015 standard, chosen for its broad applicability across a wide range of technologies and its focus on readiness process groups. Our evaluation correlates the framework's stages of operation with standard processes and contextualizes it with a Modbus TCP attack scenario. This research bridges the gap in IIoT cybersecurity, highlighting the framework's strengths and paving the way for proactive incident detection and improved forensic reporting in dynamic IIoT landscapes.