With all the developments in IT, IT infrastructure and governance, there have been corresponding increases in risk, threats and attacks. It has also become imperative for organizations to respond to attacks and breaches and to ensure that their reputation and assets are safeguarded. The response to such violations is usually legal (or disciplinary when no laws are broken, but internal policies of such organizations are taunted or violated); to achieve this successfully, evidence must be collected and provided in a legally acceptable manner. There are also other claims that can be leveled for or against the organization (e.g. insurance claims, accusations of negligence) that would require presentation of evidence.
Forensic readiness planning helps to ensure that digital evidence is readily available in a legally acceptable manner in the event one of the aforementioned issues occurs.