SSCP (ISC)2 Systems Security Certified Practitioner Official Study Guide

Chapter 6Domain 4: Incident Response and Recovery

SSCP exam objectives covered in this chapter:

1. Incident Handling
2. Preparation prior to incidents
3. Incident Discovery, and Escalation
4. Incident Reporting and Feedback
5. Incident Response
6. Implementation of Countermeasures
7. Forensic Investigations
8. Forensics Teams
9. Preservation of an Incident Scene
10. Evidence Acquisition and Handling
11. Chain of Custody of Evidence
12. Evidence, Inspection and Analysis
13. Interpretation and Reporting Assessment Results
14. Develop and Support a Business Continuity Plan (BCP) and a Disaster Recovery Plan (DRP)
15. Emergency Response Plans and Procedures
16. Alternate Site Processing Strategies
17. Restoration Planning
18. Implementing Data Backup and Redundancy
19. Business Continuity Plan (BCP) and a ...