CASP CompTIA Advanced Security Practitioner Certification Study Guide (Exam CAS-001)

10E-discovery, Data Breaches, and Incident Response

CERTIFICATION OBJECTIVES

10.01 E-discovery

10.02 Data breach

10.03 System design to facilitate incident response, taking into account types of violations

10.04 Incident and emergency response

Two-Minute Drill

Q&A Self Test

Incident response is the set of procedures used to react to computer incidents. An incident is defined as anything that occurs outside the normal range. To effectively deal with computer incidents, several conditions are required. First, the concept of what’s “normal” for a system is necessary to understand. Second, the enterprise must have a set of planned responses in the ...