ISC CISSP

회차 · v.2019-02-10

In order to be able to successfully prosecute an intruder:

하나 선택A point of contact should be designated to be responsible for communicating with law enforcement and other external agencies.A proper chain of custody of evidence has to be preserved.Collection of evidence has to be done following predefined procedures.Whenever possible, analyze a replica of the compromised resource, not the original, thereby avoiding inadvertently tamping with evidence.