Which of the following needs to be documented to preserve evidences for presentation in court?

Which of the following needs to be documented to preserve evidences for presentation in court?

A.
Incident response policy

B.
Account lockout policy

C.
Separation of duties

D.
Chain of custody

Explanation: