An organization wants to enable digital forensics for a business-critical application. Which of the following will BEST help to support this objective?

A. Install biometric access control.
B. Develop an incident response plan.
C. Define data retention criteria.
D. Enable activity logging.