To ensure that information can be traced to the originating event and accountable parties, an enterprise should FIRST:

A. improve business process controls.
B. capture source information and supporting evidence.
C. review information event logs for potential incidents.
D. review retention requirements for source information.