Scene of the Cybercrime: Computer Forensics Handbook

404 Chapter 7 • Understanding Cybercrime Prevention

help to narrow the focus of the investigation.This is often one of the most diffi-

cult and most vital steps in the investigative process.

Evaluating Security Needs

If we accept the stated definition of security policy, it becomes obvious that there

is not and cannot be a one-size-fits-all IT security policy that will work equally

well for all organizations. Security needs differ, based on:

■

Risk factors

■

The perceived and actual threat level

■

Organizational vulnerabilities

■

The organization’s philosophy (open versus closed system)

■

Legal factors

■

Available funds

It is important to analyze all these factor ...