You are a digital forensics intern at Azorian Computer Forensics, a privately owned forensics investigations and data recovery firm in the Denver, Colorado area. One of your clients wants to add forensics to their incident response plan and has asked for your assistance.

For this assignment:

1. Describe how to add forensics to incident response. Include the following points in your discussion:

• The types of changes that must be made to the clients incident response policies and procedures
• The steps that must be taken to prepare the clients staff
• The impact on IT resources
• Any legal implications of forensic activity, such as when monitoring and collecting information due to a computer intrusion

2. Write a report that addresses each of the preceding points.