ISO/IEC 27037:2012
What is ISO/IEC 27037:2012?
ISO/IEC 27037:2012 sets out how to find, take, copy and keep potential digital evidence so it stays intact and authentic and can be relied on later: relevance, reliability and sufficiency; auditable, repeatable, reproducible and justified handling; a chain of custody record from the first moment; scene security, safety and evidence risk assessment; competent first responders and specialists, properly briefed; volatile data captured first; verified copies with master and working sets; tamper-evident packaging, controlled storage and escorted transport; and device-specific handling for stand-alone computers and storage media, networked and mobile devices, and CCTV. 52 guidance leaves read against the complete English text. It comprises 52 controls organised across 3 domains, and applies in International.
Map this against the frameworks you already hold
The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.
Browse the framework graph →Where ISO/IEC 27037:2012 overlaps with the standards you already hold
What ISO/IEC 27037:2012 means in your sector
What ISO/IEC 27037:2012 means for your job
Questions people ask about ISO/IEC 27037:2012
What is ISO/IEC 27037:2012?
How many controls does ISO/IEC 27037:2012 have?
Where does ISO/IEC 27037:2012 apply?
Which version of ISO/IEC 27037:2012 is covered here?
Query ISO/IEC 27037:2012 programmatically
ISO/IEC 27037:2012, its 52 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
ISO/IEC 27037:2012 API reference and MCP config →How ready are you for ISO/IEC 27037:2012?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.