Computer Incident Response and Forensics Team Management

Computer Incident Response and Forensics Team Management provides security professionals with a complete handbook of computer incident response from the perspective of forensics team management. This unique approach teaches readers the concepts and principles they need to conduct a successful incident response investigation, ensuring that proven policies and procedures are established and followed by all team members.

Leighton R. Johnson III describes the processes within an incident response event and shows the crucial importance of skillful forensics team management, including when and where the transition to forensics investigation should occur during an incident response event. The book also provides discussions of key incident response components.

• Provides readers with a complete handbook on computer incident response from the perspective of forensics team management
• Identify the key steps to completing a successful computer incident response investigation
• Defines the qualities necessary to become a successful forensics investigation team member, as well as the interpersonal relationship skills necessary for successful incident response and forensics investigation teams

Table of Contents

Chapter 1 Introduction
Chapter 2 Definitions

Part 1 Incident Response Team
Chapter 3 The Stages of Incident Response
Chapter 4 The Security Incident Response Team Members
Chapter 5 Incident Evidence
Chapter 6 Incident Response Tools
Chapter 7 Incident Response Policies and Procedures
Chapter 8 Legal Requirements and Considerations
Chapter 9 Governmental Laws, Policies, and Procedures

Part 2 Forensics Team
Chapter 10 Forensics Process
Chapter 11 Forensics Team Requirements Members
Chapter 12 Forensics Team Policies and Procedures
Chapter 13 Management of Forensics Evidence Handling
Chapter 14 Forensics Tools
Chapter 15 Legalities of Forensics
Chapter 16 Forensics Team Oversight

Part 3 General Management and Team
Chapter 17 General Team Management
Chapter 18 Corporate IT-Related Security Relationship with SIR&FT
Chapter 19 Relationship Management
Chapter 20 Conclusion

Appendix A: References
Appendix B: Relevant Incident Response and Forensics Publications from Governmental Agencies and Organizations
Appendix C: Forensics Team Templates