First response to an incident may involve three different groups of people, and each will have differing
skills and need to carry out differing tasks based on the incident. Who is responsible for collecting,
preserving, and packaging electronic evidence?
A.
System administrators
B.
Local managers or other non-forensic staff
C.
Forensic laboratory staff
D.
Lawyers