Legal, Regulations, Investigations, and Compliance

The Legal, Regulations, Investigations and Compliance domain addresses ethical behavior and compliance with regulatory frameworks. It includes the investigative measures and techniques that can be used to determine if a crime has been committed, and methods used to gather evidence. This domain also includes understanding the computer incident forensic response capability to identify the Advanced Persistent Threat (APT) that many organizations face today.

We go over this domain in Chapter 12. Major topics include

Identifying legal issues and complying with international laws

Defining professional ethics

Conducting investigations and gathering evidence

Applying forensic procedures

Developing procedures for regulatory compliance

Reviewing contractual agreements and procurement processes