Which of the following should be of GREATEST concern to an IS auditor reviewing actions taken during a forensic investigation?

A. The investigation report does not indicate a conclusion.
B. An image copy of the attacked system was not taken.
C. The proper authorities were not notified.
D. The handling procedures of the attacked system are not documented.