A write blocker is a forensic device (hardware or software) that prevents write access to a storage medium while it is being read. This preserves the integrity of evidence. In an ISMS, the write blocker is part of the forensic toolkit for incident handling. Without a write blocker, metadata such as access timestamps could be altered, potentially undermining the evidentiary value. Common manufacturers include Tableau (now OpenText) and CRU.