Digital Forensics and Incident Response

SCOPE OF WORK

The service

Evidence analysis and incident management support to reconstruct events and guide recovery.

Service activities

• Defining the scope and preserving data
• Reconstructing activity and assessing impact
• Decision support and evidence documentation

Scope, technologies, activity frequency and support levels are agreed according to the context. Operating arrangements are defined before the service begins.

How the project works

1. 01
   Define

   Objectives, scope and responsibilities.

2. 02
   Deliver

   Agreed activities and evidence collection.

3. 03
   Report

   Findings, limitations and next steps.

Where to start

Describe the systems involved, the issue to address and the project contacts. In our initial discussion, we define objectives, required information and the approach to delivery.

Watch the Cyber-Med videos ↗