Eleventh Hour Security+

FORENSICS

Computer forensics is the application of computer skills and investigation techniques for the purpose of acquiring evidence. It involves collecting, examining, preserving, and presenting evidence that is stored or transmitted in an electronic format. Because the purpose of computer forensics is its possible use in court, strict procedures must be followed for evidence to be admissible. Even when an incident isn’t criminal in nature, forensic procedures are important to follow.

AWARENESS

Management and employees need to be aware of the need to support computer forensic examinations. Management needs to provide funding for tools and ongoing training in examination procedures or to hire outside parties to perform the investigation. If ...