Watch this video on YouTube
Why is "slack space" of value to an information security manager as pan of an incident investigation?