February 2026
Intermediate to advanced
456 pages
17h 3m
English
In this chapter, you learned about the fundamentals of disaster recovery, as well as how that process is impacted by computer forensics. The most important lesson from this chapter is that every organization must intertwine forensic evidence gathering with its disaster recovery and incident response policies. As soon as an incident is contained, and before it is eradicated, it is important to preserve the evidence. This evidence will be useful in gaining a better understanding of the causes of the incident, thus leading to better planning to avoid similar incidents in the future.
Read now
Unlock full access