* Maintaining power ensures volatile memory (RAM) data is preserved, which can contain critical forensic evidence such as running processes and network connections.
* Securing the area prevents tampering or unauthorized access, preserving the integrity of evidence.
Why Other Options Are Incorrect:
* A. Shut-down the computer: Shutting down can result in loss of volatile data critical to the investigation.
* C. Place components in anti-static bags: Prematurely removing hardware disrupts the state of the machine and can lead to loss of evidence.
* D. Secure the area: While important, it does not address the need to preserve volatile memory.
EC-Council CISO Reference:The first-responder guidelines stress the importance of preserving evidence integrity and avoiding actions that could destroy critical forensic data.

* Authentication Defined:
* Authentication is the process of verifying the identity of an entity (person, system, or device) seeking access to resources.
* Typically involves something the user knows (password), has (token), or is (biometric).
* Comparison with Related Terms:
* Identification: Specifies who the user claims to be (e.g., username).
* Authorization: Determines what resources the authenticated user can access.
* Accountability: Tracks user actions after authentication and authorization.
References:
* EC-Council CISO Handbook: Access Control Mechanisms and Processes.

Stakeholder Roles:
* Stakeholders are those who have a vested interest in or are affected by IT security projects.
* The Help Desk typically serves as a support function and is not directly involved in decision-making or implementation.
Why Other Options Are Valid Stakeholders:
* A. Board of directors: Responsible for approving funding and ensuring alignment with business goals.
* B. Third party vendors: Often supply solutions or services critical to IT security projects.
* C. CISO: Directly responsible for overseeing and guiding IT security initiatives.
EC-Council CISO Reference:The curriculum identifies stakeholders based on their roles in governance, risk management, and operations, excluding roles like Help Desk that serve ancillary purposes.

Primary Concerns in Assessing Internal Control Objectives:
* Management evaluates whether controls ensure compliance with regulations, effectively mitigate risks, and operate efficiently.
Strategic Focus:
* These concerns help balance regulatory requirements, organizational objectives, and resource constraints.
Supporting Reference:
* CCISO highlights compliance, effectiveness, and efficiency as fundamental aspects of evaluating internal control objectives.

* System Security Plan (SSP) Overview:
* Documents the controls in place to secure a system, the type of information handled, and system interconnections.
* Focuses on describing the system's security posture, not external audit results.
* Why Not Other Options:
* A: Controls are a core part of the SSP.
* B: Connected systems must be documented for interconnection security.
* D: The type of information processed is required to determine security requirements.
References:
* EC-Council CISO Material on SSP Requirements.
Reference: https://www.govinfo.gov/content/pkg/GOVPUB-C13-63e84ab7af43b36228f10e4f0b5f8c38/pdf
/GOVPUB-C13-63e84ab7af43b36228f10e4f0b5f8c38.pdf (65)