4.0 Operations and Incident Response
4.1 Given a scenario, use the appropriate tool to assess organizational security.
4.2 Summarize the importance of policies, processes, and procedures for incident response.
4.3 Given an incident, utilize appropriate data sources to support an investigation.
4.4 Given an incident, apply mitigation techniques or controls to secure an environment.
4.5 Explain the key aspects of digital forensics.