Incident investigation
Use a fictional security incident to build an evidence log, document preservation steps and write a short impact assessment for business stakeholders.
The CIRT role combines digital evidence preservation with incident impact assessment and stakeholder engagement.
Source posting