Post-Incident Activity

Question 1

Forensic Analysis

Answer 1

Forensic analysis - also called digital forensics; legal compliance guidelines; may involve data recovery

Question 2

Root Cause Analysis

Answer 2

Root cause analysis - defined by the NIST; a principle-based, system approach for the identification of underlying causes associated with a particular set of risks

Question 3

Lesson Learned

Answer 3

Lessons learned - often in the form of a report; typical format - issue; discussion; recommendation

Question 4

What criteria do you need to consider in Forensic Analysis

Answer 4

Legal Compliance Guidelines - Digital forensics

Question 5

What criteria do you need to consider in Root Cause Analysis

Answer 5

Defined by the NIST

“A Principle-based, systems approach for the identification of underlying cause associated with a particular set of risks

Question 6

What criteria do you need to consider in Lesson Learned

Answer 6

Often in the form of a formal report

Typical format
-issue
-discussion
-recommendation