CHAPTER 13

Legal Issues

In this chapter you will learn about

•  Computer forensics

•  Incident handling processes

•  Three phases of a computer forensic investigation

•  The importance of preserving and protecting evidence

•  How to protect volatile RAM and data on disk drives

•  The difference between computer abuse and computer crime

•  How mandatory vacations and job rotation help prevent fraud

•  Some of the laws and regulations designed to protect PII

Exploring Computer Forensics

Computer forensics is the science of examining and inspecting computer systems for evidence about an event or crime. The examination includes recovering data stored on or transmitted by any electronic device. A primary goal when identifying and recovering digital ...

Get SSCP Systems Security Certified Practitioner All-in-One Exam Guide, Second Edition, 2nd Edition now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.