Independent technical practice
Find seven information-gathering packages for DFS, New York privacy, CMMC, EAR/ITAR, departed employees, contract disputes and medical matters.
Global Digital Forensics · Information gathering library · October 18 2026
Edition GATHER-20261018-01 · Information-gathering edition
Read this guide freely. Request download access with your name and email.
GDF records the selected resource in its lead intake and private Stats.
Open your emailed link for seven days of preparation downloads in this browser.
No marketing subscription is created. Keep completed records in controlled systems.
Find and organize the records a potential auditor, consultant, attorney or export-control specialist needs. Choose a package, send its questions to the appropriate owners and return a record index with explicit gaps. Use these packages alongside the existing OT, New York and New Jersey preparation libraries. Professional applicability, evidence sufficiency and specialist acceptance remain separate decisions.
A plain-language manual, specific gathering requests, an editable checklist, questions for IT and business owners, a blank record index, open questions with responsible roles, handoff checks and source references. The three legal-matter packages also contain sample discovery questions for counsel to tailor.
Prepare an organized set of entity facts and existing cybersecurity records for a Part 500 auditor or consultant.
23 NYCRR Part 500 preparation for a potentially covered legal entity. Other DFS examination areas such as financial condition, anti-money laundering or transaction monitoring are outside this package.
Find where New York residents information is held and assemble existing safeguards and incident records for a privacy or cybersecurity specialist.
General Business Law 899-aa and 899-bb preparation, with a separate branch for state entities and sector-specific obligations. It is not a universal New York privacy certification.
Gather the contract, information-flow and existing security records a CMMC or NIST SP 800-171 specialist needs to propose and scope work.
FCI/CUI safeguarding and CMMC preparation. This package does not calculate a score, award status, perform an assessment or replace the required assessor.
Prepare business, item, technology, transaction and access facts for an export-control specialist to determine jurisdiction, classification and required authorizations.
EAR and ITAR preparation with cyber/data-handling questions. Sanctions, customs, nuclear exports, classified information and other regimes may require additional specialists.
Help counsel and a forensic consultant identify relevant people, devices, accounts, repositories and short-lived records before collection.
Employment, confidential-information and departure disputes. This package does not assume theft, recoverability, employer ownership of personal accounts or authority to access another organization.
Help counsel and a technical consultant locate the records of negotiation, agreement, performance, payment and change across business systems.
Contract and commercial disputes, including digital agreements and performance records. Relevance, interpretation, damages and admissibility remain professional legal/expert work.
Help a legal and technical team identify relevant clinical, administrative and audit records for a medical matter and prepare a lawful, precise specialist handoff.
Medical treatment, documentation, privacy and related disputes. It is not a medical opinion, determination of altered records, an EMR vendor extraction manual or authority to access patient data.
This first release develops NYDFS Part 500, New York private information, defense contractor cybersecurity, EAR/ITAR and the three agreed case types. Other federal/state and sector programs have routing prompts only. It does not complete the existing fifty-state utility expansion or close the earlier 18 New Jersey work packages.
The current CMMC implementation documents require contract-specific reconciliation. New York hospital operative text, some full current federal text, actual client applicability, vendor configuration, collection authority and native/accessibility acceptance retain explicit source or client gates.
Extract a downloaded ZIP before opening the HTML manuals. Use a current browser for searchable reading and the PDF for printing. CSV files are editable text tables, not formatted Excel workbooks: import as UTF-8, keep IDs as text, wrap and widen columns, and save a client working copy in the approved location. The PDF is a reference document, not a fillable form. No passwords, patient data or controlled technical material belong in public forms or ordinary email.