CISA Certified Information Systems Auditor – Question2774

The risks associated with electronic evidence gathering would MOST likely be reduced by an e- mail:

A. destruction policy.
B. security policy.
C. archive policy.
D. audit policy.

Correct Answer: C

Explanation:

Explanation:
With a policy of well-archived e-mail records, access to or retrieval of specific e-mail records is possible without disclosing other confidential e-mail records. Security and/or audit policies would not address the efficiency of record retrieval, and destroying e-mails may be an illegal act.