Responding to cybersecurity incidents requires detailed investigation to identify vulnerabilities, trace attack vectors and safeguard against future intrusions.

The Cybersecurity and Infrastructure Incident Response and Vulnerability playbook released by the Cybersecurity and Infrastructure Security Agency (CISA) in November 2021 lays out a detailed plan for how agencies should implement communication, technology, and policy for Incident response. Forensic collection, preservation, analysis, and reporting are important parts of this playbook.

In this webcast, Federal Times will explore the Incident Response playbook, the role of forensic investigation and key collection technologies and methods for effective incident response.