Learning Objectives and Outcomes

• Describe the implications of and necessary steps for adding forensics to incident response.

Assignment RequirementsYou are a digital forensics intern at Azorian Computer Forensics, a privately owned forensics investigations and data recovery firm in the Denver, Colorado area. One of your clients wants to add forensics to their incident response plan and has asked for your assistance.For this assignment:

1. Describe how to add forensics to incident response. Include the following points in your discussion:
   
   • The types of changes that must be made to the client's incident response policies and procedures
   • The steps that must be taken to prepare the client's staff
   • The impact on IT resources
   • Any legal implications of forensic activity, such as when monitoring and collecting information due to a computer intrusion
2. Write a report that addresses each of the preceding points.

Required Resources

• Course textbook
• Internet access

Submission RequirementsFormat:Microsoft WordFont:Arial, size 12, double-spaceCitation Style:Follow your school's preferred style guideLength:1-2 page
Self-Assessment Checklist

• I described how to add forensics to incident response by addressing the following:
  
  1. The types of changes that must be made to incident response policies and procedures
  2. The steps that must be taken to prepare staff
  3. The impact on IT resources
  4. Any legal implications of forensic activity, such as when monitoring and collecting information due to a computer intrusion
• I created a professional, well-developed report with proper documentation, grammar, spelling, and punctuation.