Federal Drive

Jason Miller: US-CERT’s do’s-and-don’ts for after the cyber hack

Agency tech staffs too often erase important forensic evidence after a cyber attack. Homeland Security is trying to change that so system administrators preserv...

Tom Temin@tteminWFED

September 11, 2015 10:13 am

< a min read

Agency tech staffs too often erase important forensic evidence after a cyber attack. Homeland Security is trying to change that so system administrators preserve data. Ann Barron-DiCamillo is the director of the U.S. Computer Emergency Response Team. She tells Executive Editor Jason Miller about some of the disturbing trends her team sees and how agencies can avoid erasing forensic evidence after a cyber attack. Read Jason's related story.