Scene of the Cybercrime: Computer Forensics Handbook

Understanding Cybercrime Prevention • Chapter 7 401

Incident response is the culmination of everything we’ve discussed in this

book and the first step in the investigative process. In this chapter, we’ve moved

from security theory and concepts to the “hands-on” aspects of a security plan:

implementation of security measures and finally, should those fail, planning to

respond to an attack. However, the document that brings all these topics together

is the organization’s security policy, which governs everything from the way secu-

rity technologies are to be used to the procedures prescribed for the incident

response team.The next section provides an o ...