Legal aspects

As we saw in Chapter 1, Understanding Incident Response, a proper incident response involves key individuals from a variety of disciplines. This highlights one frequently held misconception: incident response is strictly a technology matter. One realm into which incident response falls heavily is the legal arena. There are a wide range of laws and regulations that directly impact an organization's incident response capability, ranging from breach notification to privacy. These laws provide a framework for governments to prosecute offenders, as well as providing strict rules concerning topics such as how evidence is handled and presented in court.

Laws and regulations

In the mid-1980s, as computer crime started...