Frequently Asked Questions

Q: What do I do if a cyber-incident occurs?
A: Have policies with solid protocols and workable guidelines in place and ready to deploy. Protect assets, protect evidence, isolate affected system, limit use and exposure to system, preserve logs, assess damage and seek help early. Each incident can be unique and may require some flexibility and tactical strategy with the best and most resonable approaches suitable to the clients need.

Q: What are the essential steps in digital evidentiary preservation?
A: Download our Steps in Digital Evidence Preservation.