IT Professional Curricula     Internet and Network Technologies Solution Area     Security Solutions     CompTIA Advanced Security Practitioner (CASP+)

---

Incident response and recovery procedures are essential to enterprise security operations. In this course, you will learn about e-discovery, data breach detection, collection, and analytics, data breach isolation, recovery, and response. Other topics include incident detection and response, disaster recovery and order of volatility, incident response support tools, and post-incident response. Finally, as a scenario exercise, you will name the three phases of e-discovery, list the eight phases of EDRM, list the seven orders of volatility, and name three components to make hashed images in a forensic investigation.

---

---

Objectives

Conducting Incident Response Methodologies start the course describe e-discovery specify data breach detection, collection, and analytics specify data breach isolation, recovery, and response facilitate incident detection and response describe incident and emergency response describe disaster recovery and order of volatility define incident response support tools specify incident or breach severity describe post-incident response Practice: Response and Recovery describe incident response and recovery