CYS 711

Computer incidents can cause data loss or service outage. Organizations should be aware of how best to protect themselves through the development of incident response policy and operational procedures for handling and analyzing these incidents. At the top level is the incident response governance and policy, and understanding how to develop and maintain such a policy is critical. Incident response team development and management, evidence handling, and the technical skills necessary to locate appropriate evidence are covered.