The detection, investigation and preservation of evidence or electronic evidence that can be used to defend the company against possible criminal liability is known as COMPUTER FORENSICS. This discipline is mainly divided into several processes which can be developed either independently or in sequence, depending on the needs of the company.
If the student has no knowledge of computer security it is recommended to take the course Computer Security Introduction before this.
Image source: modification of "Hard Disc Crash" by Barney Livingstone