Alisi, a cybersecurity manager, has found that a former employee was engaging in illegal activities online;she must report these activities to local law enforcement authorities. She locks the employee's computer in a closet to which only she and two of her peers have access. Which of the following should be created as part of the documentation for this incident?
A) PII form
B) PHI tracker
C) Incident response plan
D) Chain of custody

Question

Quizplus · Accepted Answer

The correct answer is D) Chain of custody. This document is crucial in legal contexts to track the possession, handling, and location of evidence from the time it is identified until it is presented in court. It ensures the integrity and security of the evidence, in this case, the employee's computer, by documenting who has access to it and any actions taken with it.

Alisi, a Cybersecurity Manager, Has Found That a Former Employee