Question: An information security manager is developing evidence preservation procedures for an incident response plan. Which of the following would be the BEST source of guidance
An information security manager is developing evidence preservation procedures for an incident response plan. Which of the following would be the BEST source of guidance for requirements associated with the procedures?
- A. IT management
- B. Legal counsel
- C. Executive management
- D. Data owners
My immediate choice is "B" but the official answer (not ISACA!) chose "D"... which I somewhat agree. Can expert explain which one is the right choice and why? THANKS!
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
