Page 5.2 Crime Investigation 5 - 6 5.2.1 Definition of Computer Crime 5 - 6 5.2.1.1 Examples of Computer Essentials 5 - 6 5.2.1.2 Examples of Computer Non-Essentials 5 - 7 5.2.2 Evidence 5.2.2.1 5.2.3 5 - 7 Types of Evidence 5 - 7 Conducting Computer Crime Investigation 5 - 7 5.2.3.1 Detection and Containment 5 - 8 5.2.3.2 Report to Management 5 - 8 5.2.3.3 The Preliminary Investigation 5 - 8 5.2.3.4 Determine if Disclosure is Required 5 - 9 5.2.3.5 Investigation Considerations 5 - 9 5.2.3.6 Who should Conduct the Investigation 5 - 9 xii