1
00:00:06,630 --> 00:00:07,830
- Lesson 21:

2
00:00:07,830 --> 00:00:10,470
Explain Appropriate Incident
Response Activities,

3
00:00:10,470 --> 00:00:13,470
which maps to CompTIA exam objective 4.8,

4
00:00:13,470 --> 00:00:15,660
is all about incident management

5
00:00:15,660 --> 00:00:18,330
including the process of preparation,

6
00:00:18,330 --> 00:00:23,330
detection, analysis, containment,
eradication, recovery,

7
00:00:23,933 --> 00:00:26,760
and the all-important lessons learned.

8
00:00:26,760 --> 00:00:29,070
We'll also take a look
at evidence handling

9
00:00:29,070 --> 00:00:30,510
and digital forensics

10
00:00:30,510 --> 00:00:34,260
since security personnel are
very often first responders.

11
00:00:34,260 --> 00:00:35,640
And we'll finish the lesson

12
00:00:35,640 --> 00:00:39,660
by discussing disclosure and
notification requirements.

13
00:00:39,660 --> 00:00:41,550
Now at the end of lesson 21,

14
00:00:41,550 --> 00:00:44,910
together we'll work through
a 10-question deep-dive quiz.

15
00:00:44,910 --> 00:00:46,113
So let's keep going.