Forensics: Difference between revisions

From BCMpedia. A Wiki Glossary for Business Continuity Management (BCM) and Disaster Recovery (DR).
Jump to navigation Jump to search
No edit summary
 
(No difference)

Latest revision as of 11:52, 3 November 2020

1. Forensic refers to action taken to gather and preserve evidence for investigation and legislation purposes after a cyber security attack has occurred.









Click to know more about expert level training

(Source: Business Continuity Management Institute - BCM Institute)

 

A Manager’s Guide to Business Continuity Management for Cybersecurity Incident Response

2. Digital forensics is about investigating after a cyber attack or crime has taken place.
Source: (Miner, 2016)

3. Forensics refer to the science of identifying, preserving, recovering, analyzing and presenting facts about digital evidence found on computers or digital storage media devices.
Source: (Stephens, 2016)

4. Digital forensics is the collection, examination, and reporting of digital evidence.
Source: (Kassner, 2011)