Question: An information security manager is developing evidence preservation procedures for an incident response plan. Which of the following would be the BEST source of guidance

An information security manager is developing evidence preservation procedures for an incident response plan. Which of the following would be the BEST source of guidance for requirements associated with the procedures?

  • A. IT management
  • B. Legal counsel
  • C. Executive management
  • D. Data owners

My immediate choice is "B" but the official answer (not ISACA!) chose "D"... which I somewhat agree. Can expert explain which one is the right choice and why? THANKS!

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related General Management Questions!