When multiple Internet intrusions on a server are detected, the PRIMARY concern of the information security manager should be to ensure that the:

A. server is backed up to the network.
B. server is unplugged from power.
C. integrity of evidence is preserved.
D. forensic investigation software is loaded on the server.