For this question, an event is any observable occurrence in a computer, device, or network. An event can be anything that you may see reported in a log file. Events can be good or bad. Any event that results in a violation of or poses an imminent threat to the security policy of the company is an incident. Answer the following question(s): provide valid rationale for your choices. Provide 2 resources supporting you position. Would the process of incident response change if a crime was intentionally committed versus an accidental event, such as an employee who clicks a phishing email link? That is, would the process of detecting, identifying, resolving, and documenting system or network intrusions change? Why or why not?
For this question, an event is any observable occurrence in a computer, device, or network. An event can be anything that you may see reported in a log file. Events can be good or bad. Any event that results in a violation of or poses an imminent threat to the security policy of the company is an incident.
Answer the following question(s): provide valid rationale for your choices. Provide 2 resources supporting you position.
Would the process of incident response change if a crime was intentionally committed versus an accidental event, such as an employee who clicks a phishing email link? That is, would the process of detecting, identifying, resolving, and documenting system or network intrusions change? Why or why not?
Trending now
This is a popular solution!
Step by step
Solved in 2 steps