How to Document and Maintain Evidence of an Incident

Documentation is a key, and often overlooked, component of incident response and a primary consideration outlined by the FFIEC Information Security Examination Handbook.