From BCMpedia. A Wiki Glossary for Business Continuity Management (BCM) and Disaster Recovery (DR).
Jump to: navigation, search
1. Forensic refers to action taken to gather and preserve evidence for investigation and legislation purposes after a cyber security attack has occurred.

(Source: Business Continuity Management Institute - BCM Institute)

A Manager's Guide to Business Continuity Management for Cyber Security Incident Response (2017) BUY!


2. Digital forensics is about investigating after a cyber attack or crime has taken place.
Source: (Miner, 2016)

3. Forensics refer to the science of identifying, preserving, recovering, analyzing and presenting facts about digital evidence found on computers or digital storage media devices.
Source: (Stephens, 2016)

4. Digital forensics is the collection, examination, and reporting of digital evidence.
Source: (Kassner, 2011)