Computer Science Homework Help
Campbellsville University Describe the Purpose and Function of The CSIRT Questions
Need help with my Computer Science question – I’m studying for my class.
- Describe the purpose and function of the CSIRT
- Discuss the skills and abilities needed in the CSIRT
- Explain the standing operating procedures associated with CSIRT operations
- Describe training and deployment of the CSIRT
- Explain what an IR reaction strategy is and list general strategies that apply to all incidents.
- Define incident containment and describe how it is applied to an incident.
- List some of the more common categories of incidents that may occur.
- Discuss the IR reaction strategies unique to each category of incident.
- Describe how an organization plans for and executes the recovery process when an incident occurs
- Explain the need for and steps involved in the ongoing maintenance of the IR plan
- List the steps involved in collecting digital evidence
- Discuss the process used to analyze evidence
- Explain how encryption can thwart digital forensic analysis