System Backup
Were backup copies of affected systems created for further analysis?
Are the forensic copies encrypted and stored in a secure location?
-
If yes, then continue to the next step.
-
If no, encrypt the forensic images, then store them in a secure location to prevent accidental usage, damage, and tampering.