When these are appropriate, unfortunately they are generally based upon the vague notion of ‘best practice’ and ‘the accepted norm’ in the particular field. It is difficult to apply in a rapidly developing domain, such as digital forensics, as technology changes are naturally always ahead of ‘best practice’ developments.