Tailor the e-discovery search methodology to evolve with e-discovery rules.

CONTROL ID
00625

CONTROL TYPE
Records Management

CLASSIFICATION
Preventive

This Control directly supports the implied Control(s):

Document the evidential weight of the information and the information processing assets., CC ID: 00624

There are no implementation support Controls.

Examine results from recent data discovery efforts, and interview responsible personnel to verify that data discovery is performed at least once every three months and upon significant changes to the CDE or processes. (A3.2.5.b, Payment Card Industry Data Security Standard Requirements and Testing Procedures, Defined Approach Testing Procedures, Version 4.0)
The entity has a process in place to test the effectiveness of methods used for data discovery. (A3.2.5.1.a Bullet 1, Payment Card Industry Data Security Standard Requirements and Testing Procedures, Defined Approach Testing Procedures, Version 4.0)
Requesting parties must tailor discovery requests that are directed to nonparties carefully and should undertake efforts to negotiate with them about the scope and production form. (Comment 7.b ¶ 5, The Sedona Principles Addressing Electronic Document Production)
The parties should agree on the search terms and methods as early as possible and the agreement should allow for the refinement of the search terms. (Commment 11.a ¶ 5, The Sedona Principles Addressing Electronic Document Production)