Computer Incident Response and Forensics Team Management: Conducting a Successful Incident Response

by Leighton Johnson

Overview

Computer Incident Response and Forensics Team Management provides security professionals with a complete handbook of computer incident response from the perspective of forensics team management. This unique approach teaches readers the concepts and principles they need to conduct a successful incident response investigation, ensuring that proven policies and procedures are established and followed by all team members. Leighton R. Johnson III describes the processes within an incident response event and shows the crucial importance of skillful forensics team management, including when and where the transition to forensics investigation should occur during an incident response event. The book also provides discussions of key incident response components. - Provides readers with a complete handbook on computer incident response from the perspective of forensics team management - Identify the key steps to completing a successful computer incident response investigation - Defines the qualities necessary to become a successful forensics investigation team member, as well as the interpersonal relationship skills necessary for successful incident response and forensics investigation teams

Product Details

ISBN-13:	9780124047259
Publisher:	Syngress Publishing
Publication date:	11/08/2013
Sold by:	Barnes & Noble
Format:	eBook
Pages:	352
File size:	9 MB

About the Author

Leighton Johnson, the CTO of ISFMT (Information Security Forensics Management Team), a provider of cybersecurity & forensics consulting and certification training, has presented computer security, cyber security and forensics lectures, conference presentations, training events and seminars all across the United States, Asia and Europe. He has over 40 years' experience in Computer Security, Cyber Security, Software Development and Communications Equipment Operations & Maintenance; Primary focus areas include computer security, information operations & assurance, incident response & forensics investigations, software system development life cycle focused on testing of systems, systems engineering and integration activities, database administration and cyber defense activities.
Leighton Johnson, the CTO of ISFMT (Information Security Forensics Management Team), a provider of cybersecurity & forensics consulting and certification training, has presented computer security, cyber security and forensics lectures, conference presentations, training events and seminars all across the United States, Asia and Europe. He has over 40 years’ experience in Computer Security, Cyber Security, Software Development and Communications Equipment Operations & Maintenance; Primary focus areas include computer security, information operations & assurance, incident response & forensics investigations, software system development life cycle focused on testing of systems, systems engineering and integration activities, database administration and cyber defense activities.

Table of Contents

Introduction and definitions The Stages of Incident Response Security Incident Response Team Members Incident Evidence Incident Response Tools Incident Response Policy and Procedures Legal Requirements and Considerations Government Policy and Procedures Forensics Process Forensics Team Requirements Forensics Team Policy and Procedures Management of Forensics Evidence Handling Forensics Tools Legalities of Forensics Forensics Team Oversight Corporate Management Relationship Management Conclusion

What People are Saying About This

From the Publisher

Learn the best methods of forensics team management for conducting a complete and thorough computer incident response.

Editorial Reviews

"... might be useful as an overview for the lay person or beginner…" —Security Management

"The book explores the right subjects. It provides the right warnings, focal points, and pitfalls. It stays clearly away from technical details, but does, for instance, present tools with strengths and weaknesses. Unlike other books, it does look at the situation outside of the US. In forensics, you need to prove competence beyond doubt. For a team manager, this book is not a bad start for building that proof." —ComputingReviews.com, July/August 2014

"Ultimately, this book is about protecting the organisation – and not just against the hackers...Getting your response right is all about teamwork, and this book is a helpful guide for putting together the best team for the job." —Network Security, February 2014

From the Publisher