Applying forensic engineering to cyber security incidents

Cyber security incidents are becoming increasingly common, and society is demanding accountability for failures that lead to them. Traditional incident response focuses on containment and recovery, but it often overlooks the root cause and potential liability. This paper proposes applying forensic engineering to cyber security incidents to investigate flaws in systems and hold organisations responsible for negligence. Cyber security structures and systems should be held to the same standards of accountability as physical structures, and forensic engineering can identify flaws in cyber security systems and determine if negligence was involved, especially where there are appropriate laws and regulation to do this. This approach promotes a sense of justice and incentivises organisations to invest in stronger cyber security measures.