Legal, Regulations, Investigations, and Compliance
The Legal, Regulations, Investigations and Compliance domain addresses ethical behavior and compliance with regulatory frameworks. It includes the investigative measures and techniques that can be used to determine if a crime has been committed, and methods used to gather evidence. This domain also includes understanding the computer incident forensic response capability to identify the Advanced Persistent Threat (APT) that many organizations face today.
We go over this domain in Chapter 12. Major topics include
Identifying legal issues and complying with international laws
Defining professional ethics
Conducting investigations and gathering evidence
Applying forensic procedures
Developing procedures for regulatory compliance
Reviewing contractual agreements and procurement processes