January 2020
Intermediate to advanced
268 pages
9h 22m
English
book
Information Security Management Principles, 3rd Edition
by Andy Taylor, David Alexander, Amanda Finch, David Sutton
Content preview from Information Security Management Principles, 3rd Edition
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
9 OTHER TECHNICAL ASPECTS
In this chapter you will gain an understanding of the important aspects of incident investigation and how the forensic evidence may be preserved. You will learn about the basic concepts of and uses for cryptography, and threat intelligence and its role in a modern organisation’s defences.
INVESTIGATIONS AND FORENSICS
It has already been mentioned that, even in organisations with very effective governance, there will be occasions on which it is necessary to investigate activity and use forensic techniques to discover and preserve evidence for later use. Part of incident management is about the ability to identify answers to the questions: who, why, what, when, where and how? Some of this has been described previously ...