security report Flashcards
1
Q
what policy do you look at to answer the question
A
incident management policy
2
Q
what is the incident management policy for
A
a fail safe if the system fails
3
Q
what evidence items should you use
A
1-5
4
Q
what is the aim of this activity
A
to suggest improvements to there incident management report tighten there security
5
Q
what are the segments of the report
A
title
intro- explain the scenario
main text- following the forensic procedures + current security + protection measures
conclusion- how to improve policy
6
Q
what do you have to do with the evidence
A
prove that it is or isn’t a cyber attack
7
Q
what makes it easier for the examination to mark
A
good structure, clear and sensible
8
Q
A
9
Q
A
