CISA Certified Information Systems Auditor – Question1224

Which of the following is MOST important when an incident may lead to prosecution?

A.
Impact analysis
B. Timely incident detection
C. Independent assessment
D. Preservation of evidence

Correct Answer: D