隨著個人資料保護法即將正式實行，許多國內相關單位開始重視數位鑑識，以處理及因應未來與日俱增之資訊安全事件。數位鑑識實驗室的建置目前尚未有各國皆遵循的標準和流程，國內鑑識人員大多僅能按照所屬組織的規範和建議流程進行鑑識作業。本論文將藉由參考國際針對一般實驗室訂定的ISO17025及數位鑑識相關實務經驗，提出符合規範和適合實際鑑識流程的鑑識實驗室建構及處理標準之建議。 / With the Personal Information Protection Act will be formally implemented, many organization pay more attention to digital forensics to face information security events growing. But there is no standards and processes to build a digital forensics lab and investigators can only follow their teams’ specifications and process. This paper will give suggestions about the structure of digital forensics lab and standard operation process of digital forensics base on ISO17025 and practical experience.