Chapter 7. Legal, Regulations, Investigations, and Compliance

Security professionals are expected to understand how computer laws work, how investigations should be handled, and what is considered ethical behavior. As a CISSP, you will be required to sign a code of ethics confirming that you will always act in an ethical manner.

All security topics fall into one of three areas: prevention, detection, or response. This domain deals mainly with the final third of this security triad: response. How will you react when you realize that a computer crime has been committed? What will you do when you discover that a network intrusion has taken place? How will you handle potential computer evidence? Knowledge of these subjects is critical for successful ...

Get CISSP Practice Questions Exam Cram, Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.