CISSP - Investigations Criminal Civil Administrative and Regulatory
CISSP Domain 1.5 covers investigations - the legal and procedural framework that determines whether your breach evidence holds up in court. Learn the 4 investigation types (administrative, criminal, civil, regulatory), evidence categories, chain of custody procedures, legal holds, e-discovery obligations, and how to work with law enforcement. The Target 2013 breach case study - 40M cards compromised, $18.5M settlement - shows exactly how investigation failures compound a breach. Watch the next video: CISSP 1.6 - Security Policies, Standards, Procedures, and Guidelines.
▶ Watch next: cissp_1_6 https://www.youtube.com/watch?v=AM6rf4ADN_M
Chapters
- 0:00 When a Security Incident Becomes a Legal Case
- 2:16 Four Investigation Types — Know the Stakes
- 4:30 Evidence Types — What Holds Up in Court
- 6:45 Chain of Custody — The Process That Decides Admissibility
- 9:08 Legal Holds and E-Discovery
- 11:33 Law Enforcement and the Target 2013 Breach
- 14:20 Recap — Investigations Done Right
- 17:05 Quiz Time
CISSP Domain 1.
Key Topics
- When a Security Incident Becomes a Legal Case
- Four Investigation Types — Know the Stakes
- Evidence Types — What Holds Up in Court
- Chain of Custody — The Process That Decides Admissibility
- Legal Holds and E-Discovery
- Law Enforcement and the Target 2013 Breach
- Recap — Investigations Done Right