Create a policy that ensures all evidence is collected and handled in
After the recent security breach, Always Fresh decided to form a computer security incident response team (CSIRT). As a security administrator, you have been assigned the responsibility of developing a CSIRT policy that addresses incident evidence collection and handling. The goal is to ensure all evidence collected during investigations is valid and admissible in court. Consider the following questions for collecting and handling evidence: 1. […]