You company suspects an employee of sending unauthorized emails to competitors. These emails
are alleged to contain confidential company dat a. Which of the following is the most important
step for you to take in preserving the chain of custody?
A.
Preserve the email server including all logs.
B.
Seize the employee’s PC.
C.
Make copies of that employee’s email.
D.
Place spyware on the employee’s PC to confirm these activities.