CISSP-ISSMP: Information Systems Security Management Professional

By ISC · Question Mode

QuestionQ156

VerifiedLaw, Ethics, and Security Compliance Management

Your company suspects that an employee has sent unauthorized emails to competitors. The emails allegedly contain confidential company data. Which of the following is the most important action to take to preserve the chain of custody?

Explanation

Preserving the email server together with all logs retains the original emails and the related metadata and audit trail needed to establish their origin, transmission, integrity, and documented handling. Chain of custody requires evidence to be safeguarded and its possession and transfers tracked throughout collection and analysis.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!