List the six activities in the EBK to ensure that the digital forensics process is properly resourced and managed.

What will be an ideal response?

1. Acquire the necessary contractual vehicle and resources-including financial resources-to run forensic labs and programs
2. Coordinate and build internal and external consensus for developing and managing an organizational digital forensic program
3. Establish a digital forensic team-usually composed of investigators, IT professionals, and incident handlers-to perform digital and network forensics activities
4. Provide adequate work spaces that at a minimum take into account the electrical, thermal, acoustic, and privacy concerns (e.g., intellectual properties, classification, and contraband) and security requirements (including access control and accountability) of equipment and personnel, and provide adequate report writing/administrative areas
5. Ensure appropriate changes and improvement actions are implemented as required
6. Maintain current knowledge of forensic tools and processes