Agenbag, SHenney, AMeyer, Heloise2026-08-072026-08-072026-07http://hdl.handle.net/10204/14881Mobile device forensics has become central to digital investigations, yet existing process models for smartphones and other portable devices remain fragmented, platform-specific, and inconsistently aligned with international standards. This paper proposes an integrated conceptual framework for mobile digital forensics that combines the operational phases of NIST SP 800-101 Rev. 1 (Preservation, Acquisition, Examination/Analysis, Reporting) with the governance and validation principles of the ISO/IEC 27000-family standards, including ISO/IEC 27037, 27040, 27041, 27042, 27043, and 27050. The conceptual framework explicitly incorporates contemporary mobile challenges— such as platform diversity, file-system variation, strong encryption, applicationcentric data storage, high data volatility, and cloud dependencies—and maps them to concrete activities and controls at each phase. The paper illustrates how this integrated model can guide evidence handling, tool validation, and artefact analysis in mobile investigations, addressing long-standing inconsistencies in mobile forensic practice. The proposed conceptual framework aims to support more defensible, repeatable mobile device forensics and to provide a basis for future empirical evaluation and tool-agnostic checklists.FulltextenMobile Device ForensicsNIST SP 800-101ISO/IEC 27000Digital evidenceConceptual frameworksProcess Model ValidationConference Presentationn/a