Название: Hands-on Incident Response and Digital Forensics
Автор: Mike Sheward
Издательство: BCS, The Chartered Institute for IT
Год: 2018
Страниц: 238
Язык: английский
Формат: epub, pdf (conv)
Размер: 10.1 MB

Incident response and digital forensics require a balancing act to get right, but both are essential when an information security incident occurs. In this practical guide, the relationship between incident response and digital forensics is explored and you will learn how to undertake each and balance them to meet the needs of an organisation in the event of an information security incident. Best practice tips and real-life examples are included throughout.

There are countless books on information security theory, and many of them are dedicated to incident response (IR). So, what makes this one any different? The aim of this book is to take the theory and show how it applies to various real-life incidents and investigations, in a hands-on fashion. Throughout my career I’ve been faced with a number of security incidents and investigations, and have served as both an outside consultant and an internal incident lead at various organisations. These experiences have taught me a lot about the way different businesses react, especially when faced with the prospect of having to explain to customers, regulators or employees that something undesirable has happened to their data.

Another key theme, as you can probably guess from the title, is exploring the relationship and transition between incident response and digital forensics. These two disciplines actually have very similar goals but require different approaches – it is this difference that can lead to the friction between them. Incident response involves eradicating the evidence that digital forensics relies on, but both strive for resolution.

As we move into the second half of the book, focused on digital forensics, you’ll notice a shift in style. Whereas organisations have the freedom to completely develop their own incident response processes, digital forensics is a branch of forensic science and therefore the steps taken become more prescriptive.

'A fantastic summary of cyber incident response and digital forensics for existing practitioners and managers which covers the all-important impact on people! This a great book to whet the appetite of those aspiring to get into the field.' --Martin Heyde "Senior Manager - Cyber Incident Response, Deloitte LLP "

'A great book which I could see on the shelf of any investigator or included in the book lists of digital forensic and cyber security students at university'. - Dale McGleenon "Cyber Forensics & Network Incident Response"