In this online course about Enterprise Security Case Management, you will learn about tools and techniques which help cybersecurity practitioners manage evidence and related case data to preserve their integrity.
Learning Objectives
By the end of this course, students should be able to:
- Create and complete chain of custody and examination forms
- Determine how and where to securely store case evidence and related data
- Determine the best data retention, destruction, and backup procedures for their organization
- Write comprehensive contemporaneous notes and capture information relevant to security cases
Framework Connections
Specialty Areas
- Digital Forensics
Feedback
If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.