• Importance of first response in incident handling.
  • Procedures for evidence collection and preservation.