Legal aspects

As we saw in the first chapter, a proper incident response involves a number of individuals from a variety of disciplines. This highlights one of the key misconceptions often held, that incident response is strictly a technology matter. One realm that incident response falls heavily into is the legal arena. There are a number of laws and regulations that directly impact an organization's incident response capability ranging from breach notification to privacy. These laws both provide a framework for governments to prosecute offenders as well as providing strict rules concerning such topics as how evidence is handled and presented in court.

Get Digital Forensics and Incident Response now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.