INF907 - Forensics in IT Security

Cible(s) de formation

Understand digital forensic science, its importance in organizations as well as the best practices it can use. Know the basic principles of Canadian criminal law and crimes related to technologies. Assess whether basic forensic security rules are present and sufficient. Understand the different stages of an investigation during a security incident. Know the rules and mechanisms for preserving digital evidence in Canadian criminal law. Know the mechanisms for using digital evidence and expert testimony in a criminal trial.Know the different issues related to the capture and preservation of IT evidence.

Contenu

Computer security incidents are so commonplace that organizations no longer wonder if they will suffer a computer attack, but when. Indeed, no matter how well an organization attempts to guard against a cyber-attack, it is clear that no one is immune to a security breach. When an incident occurs, the actions of the various responders can be critical to obtain and preserve evidence, as well as for determining the cause of the incident and managing the consequences.