CISSP - Security Operations - Section 7.1

Understand and comply with investigations including evidence collection and handling, reporting, investigative techniques, and digital forensics.

Describe digital forensics principles including evidence collection, chain of custody, preservation of artefacts, and investigative techniques used in security incidents. Apply the correct sequence of evidence handling steps so that digital evidence remains admissible and tamper-evident throughout an investigation.

Examworthy is not affiliated with or endorsed by (ISC)2. Original, blueprint-aligned practice material only.