Mike Meyers' CompTIA Security+ Certification Guide, Third Edition (Exam SY0-601), 3rd Edition

CHAPTER 13

Dealing with Incidents

How strange that nature does not knock, and yet does not intrude!

—Emily Dickinson

Bad things happen, even to the most security-conscious organizations. As an IT security professional, you need to know how to respond to negative events. This chapter explores responses to incidents ranging from the minor (like a system crash) to the major (natural disaster wiping out the company HQ) in three modules:

• Incident Response

• Digital Forensics

• Continuity of Operations and Disaster Recovery

Module 13-1: Incident Response

This module covers the following CompTIA Security+ objectives:

• 1.7 Summarize the techniques used in security assessments

• 2.1 Explain the importance of security concepts in an enterprise environment ...