A Guide to Encrypted Storage Incident Handling

Incident handling and response has become more complicated with the increased use of encrypted storage technology due, in part, to privacy legislation and regulatory compliance mandates. There are many works that have been created previously that discuss Incident Handling but very few relate to the current need to handle encrypted storage. Fortunately, there are tools and processes that aid the Incident Handler in performing their duties. In this paper, I give an overview of the Incident Handling process as it relates specifically to Encrypted Storage.