ISO/IEC 27050-1:2019 情報技術—電子情報開示—パート1：概要と概念 | ページ 6

3.1

chain of custody

demonstrable possession, movement, handling, and location of material from one point in time until another

3.2

custodian

person or entity that has custody, control or possession of Electronically Stored Information (3.9)

3.3

data breach

compromise of security that leads to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to protected data transmitted, stored or otherwise processed

[SOURCE:ISO/IEC 27040:2015, 3.7]

3.4

discovery

process by which each party obtains information held by another party or non-party concerning a matter

Note 1 to entry: Discovery is applicable more broadly than to parties in adversarial disputes.

Note 2 to entry: Discovery is also the disclosure of hardcopy documents, Electronically Stored Information (3.9) and tangible objects by an adverse party.

Note 3 to entry: In some jurisdictions, the term disclosure is used interchangeably with discovery.

3.5

disposition

range of processes associated with implementing records retention, destruction or transfer decisions which are documented in disposition authorities (3.6) or other instruments

[SOURCE:ISO 15489‑1:2016, 3.8]

3.6

electronic archive

long-term repository of Electronically Stored Information (3.9)

Note 1 to entry: Electronic archives can be online, and therefore accessible, or off-line and not easily accessible.

Note 2 to entry: Backup systems (e.g. tape, virtual tape, etc.) are not intended to be electronic archives, but rather data protection systems (i.e. recovery mechanisms for disaster recovery and business continuity).

3.7

electronic discovery

discovery (3.4) that includes the identification, preservation, collection, processing, review, analysis, or production of Electronically Stored Information (3.9)

Note 1 to entry: Although electronic discovery is often considered a legal process, its use is not limited to the legal domain.

3.8

Electronically Stored Information

ESI

data or information of any kind and from any source, whose temporal existence is evidenced by being stored in or on any electronic medium

Note 1 to entry: ESI includes traditional e-mail, memos, letters, spreadsheets, databases, office documents, presentations and other electronic formats commonly found on a computer. ESI also includes system, application and file-associated metadata (3.19) such as timestamps, revision history, file type, etc.

Note 2 to entry: Electronic medium can take the form of, but is not limited to, storage devices and storage elements.

[SOURCE:ISO/IEC 27040:2015, 3.16]

3.9

ESI analysis

element of an electronic discovery (3.8) process focused on evaluating Electronically Stored Information (3.9) for content and context to identify facts, relationships, key patterns, and other features that can lead to improved understanding of an ESI (3.9) corpus

Note 1 to entry: Content and context can include key patterns, topics, people and discussions.

3.10

ESI collection

element of an electronic discovery (3.8) process focused on gathering Electronically Stored Information (3.9) and other related material

3.11

ESI identification

element of an electronic discovery (3.8) process focused on locating potential sources and the criteria for selecting potentially relevant Electronically Stored Information (3.9)

3.12

ESI preservation

element of an electronic discovery (3.8) process focused on maintaining Electronically Stored Information (3.9) in its original or existing state

Note 1 to entry: In some matters or jurisdictions, there can be requirements to prevent spoliation (3.21) of Electronically Stored Information (3.9) .

3.13

ESI processing

element of an electronic discovery (3.8) process focused on extracting Electronically Stored Information (3.9) and converting it, if necessary, to forms more suitable for ESI review (3.16) and ESI analysis (3.10)

3.14

ESI production

element of an electronic discovery (3.8) process focused on delivering or making available Electronically Stored Information (3.9)

Note 1 to entry: ESI production can also include getting Electronically Stored Information (3.9) in appropriate forms and using appropriate delivery mechanisms.

Note 2 to entry: ESI production can be to any person or organization.

3.15

ESI review

element of an electronic discovery (3.8) process focused on screening Electronically Stored Information (3.9) based on specific criteria

Note 1 to entry: In some matters or jurisdictions, Electronically Stored Information that is considered privileged can be excluded from production.

3.16

investigation

systematic or formal process of inquiring into or researching, and examining facts or materials associated with a matter

Note 1 to entry: Materials can take the form of hardcopy documents or Electronically Stored Information (3.9) .

3.17

legal hold

process of suspending the normal disposition (3.5) or processing of records and Electronically Stored Information (3.9) as a result of current or anticipated litigation, audit, government investigation or other such matters

Note 1 to entry: The issued communication that implements the legal hold can also be called a “hold,” “preservation order,” “preservation notice,” “suspension order,” “freeze notice,” “hold order,” or “hold notice.”

3.18

metadata

data that defines and describes other data

[SOURCE:ISO/IEC 11179‑1:2015, 3.2.16]

3.19

provenance

information that documents the origin or source of Electronically Stored Information (3.9) , any changes that have taken place since it was originated, and who has had custody of it since it was originated

3.20

sanitize

render access to target data on storage media infeasible for a given level of effort

Note 1 to entry: Clear, purge, and destruct are actions that can be taken to sanitize storage media.

[SOURCE:ISO/IEC 27040:2015, 3.38]

3.21

storage

device, function, or service supporting data entry and retrieval

[SOURCE:ISO/IEC 27040:2015, 3.43]

3.22

spoliation

act of making or allowing a change to or destruction of Electronically Stored Information (3.9) where there is a requirement to keep it intact

Note 1 to entry: Spoliation can take the form of ESI destruction, corruption, or alteration of the ESI or associated metadata (3.19) as well as rendering ESI unavailable (e.g. due to encryption with no access to the decryption key, loss of media, under the control of a third party, etc.).

3.23

store

record data on volatile storage or non-volatile storage

Note 1 to entry: Non-volatile storage refers to storage that retains its contents even after power is removed, while volatile storage refers to storage that fails to retain its contents after power is removed.

[SOURCE:ISO/IEC 27040:2015, 3.50, modified — Note 1 to entry has been added.]