Incidents: Logs, Evidence and Reporting Clocks
Readiness training. LEA.Training does not grant any official certificate, licence or authority.
Someone has broken into your company's systems, or data has leaked. Your engineers want to fix it now. The law may want a report within hours. The police may want evidence next month. This unit shows how to serve all three.
Focus: keep the evidence while you fix. Know your clocks before the incident. Keep one incident record.
Learning objectives
- Preserve logs and other evidence before a fix destroys them.
- Keep one incident record that a stranger can follow.
- Build a register of your reporting clocks, and know when each one starts.
- Tell a report to a regulator from a report to police.
- Hand police a package of evidence they can use.
This lesson opens when you enrol
US$— · price for the Global edition is not set yet
Already bought it? Sign in to open it in your classroom.
Video coming soon. The lesson text covers everything you need.
Learning Check
A short, untimed check for this lesson. It is not graded and does not count toward the final assessment. The check runs on the server: questions are sent one attempt at a time and answers are never sent to your browser before you submit.
An offline PDF of this lesson will be available here for enrolled learners.