When an organization lacks internal expertise to conduct highly technical forensics investigations, what is the BEST way to ensure effective and timely investigations following an information security incident?

Question

Justin Schowalter · Accepted Answer

Ensure the incident response policy allows hiring a forensics firm.

Justin Schowalter · Answer

Purchase forensic standard operating procedures.

Justin Schowalter · Answer

Provide forensics training to the information security team.

Justin Schowalter · Answer

Retain a forensics firm prior to experiencing an incident.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 687 - CISM discussion

Suggested answer: C

0 comments