CHAPTER 13

Legal Issues

In this chapter, you will learn about

•  Computer forensics

•  The incident lifecycle

•  The three phases of a computer forensic investigation

•  The importance of preserving and protecting evidence

•  How to protect volatile RAM and data on disk drives

•  The difference between computer abuse and computer crime

•  How mandatory vacations and job rotation help prevent fraud

•  Some of the laws and regulations designed to protect PII

Exploring Computer Forensics

Computer forensics is the science of examining and inspecting computer systems for evidence about an event or crime. The examination includes recovering data stored on or transmitted by any electronic device. A primary goal when identifying and recovering digital ...

Get SSCP Systems Security Certified Practitioner All-in-One Exam Guide, Third Edition, 3rd Edition now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.