Page 39 - CITP Review

 Computer security and incident response. An outsourced team of technical and procedural experts
that detect the attackers, identify how they got in, and assist with the cleanup.
 Digital forensic services. A specialty service within the realm of incident response, where consultants
capture and analyze data stored in media formats following strict procedures, and if necessary,
prepare the evidence for handoff to law enforcement. Practitioners determine the full extent of the
breach and understand how far systems have been penetrated, as well as exactly what has been
exfiltrated. This service includes the practitioner working with the incident response team, and
creating digital images of suspect media, investigating that media using specialized tools, and
preparing evidence for eventual prosecution.

© 2019 Association of International Certified Professional Accountants. All rights reserved. 1-31