which of the following needs to be documented?

To preserve evidence for later use in court, which of the following needs to be documented?

A.
Disaster recovery plan

B.
Chain of custody

C.
Audit trail of systems usage

D.
Chain of certificates