Method validation in digital forensics (FSR-G-218)
Forensic Science Regulator (England and Wales) · Issue 2; gov.uk page last updated 22 July 2024
Identifier: FSR-G-218
Access and status
Cost
Free
Free to read or download at source. No account, no purchase.
Status
Current
Current as at the verification date below. Standards and tools both move — confirm at source before you rely on it.
What it is
The Regulator's guidance on applying the validation requirements of the code of practice to digital forensic methods: demonstrating that a method is fit for its specific intended purpose and that its limitations are understood and stated.
Who it is for, and when
Read it if you are validating digital methods or tools anywhere, not only in the UK — it is the most detailed free regulator-issued treatment of digital method validation, and it is more concrete than ISO/IEC 27041. Lawyers should read it before challenging whether a method was validated for the use actually made of it.
What it does not cover
It is guidance rather than a requirement in itself; the binding requirements sit in the statutory code of practice. It does not validate any tool for you, supplies no reference datasets, and its general validation companion FSR-G-201 is non-digital. Note that FSR-G-201 is 'Forensic science providers: validation', not mobile phone guidance.
Go to the source
Open at gov.uk (opens in a new tab)https://www.gov.uk/government/publications/method-validation-in-digital-forensics
Details
- Type
- Standard or guidance
- Written for
- Working examinerAdvancedWorking examiner, Advanced
- Publisher
- Forensic Science Regulator (England and Wales)
- Version verified
- Issue 2; gov.uk page last updated 22 July 2024
- Identifier
- FSR-G-218
- Topics
- validation, tool-testing, uk-practice, quality-assurance
- Checked at source
- Standards are revised. Confirm the current revision with the publisher before citing this.
Related entries
NIST's long-running programme that builds tool specifications, test assertions, test procedures and test data for categories of forensic function — disk imaging, hardware and software write blocking, deleted file recovery, file carving, string searching, media preparation, mobile device and cloud data extraction, Windows registry and SQLite tools — and publishes the resulting test reports with DHS Science and Technology.
A CFTT offshoot that packages NIST's test methodology so labs can run it themselves and optionally share results: distributed as bootable Linux ISOs and a portable Windows web-server build, with report templates. Current suites cover disk imaging, forensic media preparation, hardware write blocking, string searching, SQLite recovery, mobile device acquisition and cloud data extraction, with companion datasets in CFReDS.
The statutory code of practice the Forensic Science Regulator is required to publish under the Forensic Science Regulator Act 2021, setting quality standard requirements for forensic science activities relating to the investigation of crime in England and Wales. Version 2 replaced version 1 and came into force on 2 October 2025.
An 18-page standard on showing that an investigative method is fit for purpose: capturing functional and non-functional requirements, describing the method, and producing evidence that the implementation satisfies those requirements. It explicitly addresses how vendor and third-party testing can be folded into your own assurance argument.
SWGDE's statement of the minimum a laboratory must do to test a tool before using it in casework, including what to record about the tool, the test data and the outcome. The version verified here is 18-Q-001-2.1 dated 7 March 2024.