How IT can prepare for mobile forensic investigations