Review Questions

1. What is electronic discovery?

2. Name some examples of electronic discovery items.

3. The recovery of data focuses on what four factors?

4. Who works under more restrictive rules, law enforcement officials or corporate employees?

5. What is incident response?

6. Why is social engineering hard to prevent and detect?

7. Why aren’t incidents reported in many corporate environments?

8. What law was passed to avoid future accounting scandals such as those involving Enron and WorldCom?

9. Name some factors that help to determine which criminal cases get priority.

10. Name a good resource for computer forensic training for law enforcement.