Course One
Course ONE is a one day training seminar entitled, "How NOT to Damage the Evidence". It provides you with the knowledge you'll need to protect the evidence in the event of an incident and show how to integrate the principles and practices of computer forensics into the policies and procedures of your organisation. Every delegate receives a comprehensive pack containing sample policies, procedures and a CD-Rom containing tools and utilities. In fact, everything you need to build forensically sound incident response methodologies.
Daily Agenda
Although there are different streams for corporates and non- corporates and different tracks for technical, legal and managerial roles, the basic agenda headings are the same. However, the content will be different for each group reflecting their knowledge and interests.
- 09:00 - 09:30 REGISTRATION
- Tea, coffee and biscuits
- 09:30 - 11:00
- Forensic Computing Introduction
- Fundamental principles
- 11:00 - 11:20 COFFEE
- Tea, coffee and biscuits - a time to chat and relax
- 11:20 - 13:00
- Policies and Procedures
- Building forensics into corporate policies
- 13:00 - 14:00 LUNCH
- Lunch, refreshments and more time to reflect on what you experienced in the mornings.
- 14:00 - 15:00
- Computer Forensics as part of an Investigation (Guest speakers may present some or all of this session)
- When and how to inform the authorities
- 15:00 - 15:20 COFFEE
- Relax and get ready for the fun of the practical session
- 15:20 - 16:45
- Practical Sessions (Team based)
- Specific experience of how and where to find and secure evidence. Delegates will be placed in teams and presented with different scenarios. The intention is to provide practical, hands on experience of various stages of an investigation.
- 16:45 - 17:00 Summary and Close