A user's computer is suspected of hosting illegal files. The IT department has removed the computer and placed it in a secured, cypher-locked room, where it will remain until the local authorities arrive. Which of the following actions should the IT department perform NEXT?
A) Preserve data integrity
B) Identify violations of acceptable use
C) Collect evidence of illegal activity
D) Report through proper channels

Question

Quizplus · Accepted Answer

The next step is to preserve data integrity to ensure that the evidence remains unchanged and admissible in any legal proceedings.

A User's Computer Is Suspected of Hosting Illegal Files