A high-tech company dealing with sensitive data seized the mobile device of an employee
suspected of leaking company secrets to a competitive organization. Which of the following is the
BEST order for mobile phone evidence extraction?
A.
Device isolation, evidence intake, device identification, data processing, verification of data
accuracy, documentation, reporting, presentation and archival.
B.
Evidence intake, device identification, preparation to identify the necessary tools, device
isolation, data processing, verification of data accuracy, documentation, reporting, presentation
and archival.
C.
Evidence log, device isolation ,device identification, preparation to identify the necessary tools,
data processing, verification of data accuracy, presentation and archival.
D.
Device identification, evidence log, preparation to identify the necessary tools, data processing,
verification of data accuracy, device isolation, documentation, reporting, presentation and archival.