Discuss a strategy for an maintaining up-to-date understanding of the capability of the forensics process.

What will be an ideal response?

There are several strategies to maintaining up-to-date understanding of the capability of the forensics process. One is based on routine reviews. At regular intervals, such as quarterly or semi-annually, all relevant forensics procedures, protocols, and technologies are reviewed to ensure their effectiveness against corporate goals. A second method is to institute rigorous change management control into the forensic process itself. In that respect, the reviews and tests that are done as part of the evaluation of the correctness of the change ensure that the components of the forensics process always remain up to date and valid. This latter approach eliminates any time lag that might take place between significant system changes and updates to the forensic process and its technologies.

Computer Science & Information Technology

You might also like to view...

Which of the following cable types are the MOST widely used in a corporate gigabit network scheme?

A. CAT5 B. CAT1 C. CAT3 D. CAT6

Computer Science & Information Technology

Analyze the following code:

``` public class Test { public static void main(String[] args) { String s = new String("Welcome to Java"); Object o = s; String d = (String)o; } }``` a. When assigning s to o in Object o = s, a new object is created. b. When casting o to s in String d = (String)o, a new object is created. c. When casting o to s in String d = (String)o, the contents of o is changed. d. s, o, and d reference the same String object.

Computer Science & Information Technology