ABSTRACT

Initiating an investigation or analysis involves many tasks. The following are the typical tasks involved: notification, emergency response activities, immediate response, beginning the investigation, CAR, incident classification, investigation management tasks, assembling the team, restart criteria, and gathering investigation resources. Each of these issues will be reviewed briefly.