Factors Influencing the Success of Database Forensic Investigation in Organisations
Sihle Nkambule, Zainab Ruhwanya, Popyeni Kautondokwa · 2023
Database Forensics Investigation (DFBI) plays a crucial role in organizations by safeguarding information from potential intrusions and facilitating investigations by qualified practitioners when such incidents occur. This empirical research examines the factors influencing DBFI success in organizations, including data privacy, database management systems, database forensic models, and lack of knowledge. A proposed theoretical model integrates a conceptual framework called the Operational Data Platform (ODP) with Dempster-Shafer theory. Interview results revealed that 80% of respondents believed data privacy negatively impacted DBFI, leading to hindrance and prevarication of data. Sixty percent attributed the lack of DBFI knowledge to inconsistencies in applying its principles, while 40% considered ignorance a significant factor. Automation of DBFI emerged as a positive factor, with practitioners emphasizing the need for consolidation and simplification of different data models. Automation-as-a-solution was also proposed. The conclusion highlighted that data collected across database sources for investigative purposes leads to data landscapes that introduce challenges in business adoption, data duplication, and integrity. Thus, organizations must establish automated mechanisms as indisputable sources of truth, promoting commonality in DBFI practices.