Computer Incident Response and Forensics Team Management - 9781597499965

Computer Incident Response and Forensics Team Management provides security professionals with a complete handbook of computer incident response from the perspective of forensics team management. This unique approach teaches readers the concepts and principles they need to conduct a successful incident response investigation, ensuring that proven policies and procedures are established and followed by all team members.

Leighton R. Johnson III describes the processes within an incident response event and shows the crucial importance skillful forensics team management, including when and where the transition to forensics investigation should occur during an incident response event. The book also provides discussions of key incident response components such as:

• Critical chains of evidence collection and custody

• Laws, ethics, regulations, and boundaries (both international as well as US-based) for investigations and investigators

• Interpersonal relationship techniques for successful incident response teams, including technical, management, law enforcement, and relationships with professionals and organizations

• Provides readers with a complete handbook on computer incident response from the perspective of forensics team management.

• Identify the key steps to completing a successful computer incident response investigation

• Defines the qualities necessary to become a successful forensics investigation team member, as well as the interpersonal relationship skills necessary for successful incident response and forensics investigation teams