Ann, a Terminated Employee, Left Personal Photos on a Company-Issued

Ann, a terminated employee, left personal photos on a company-issued laptop and no longer has access to them. Ann emails her previous manager and asks to get her personal photos back. Which of the following BEST describes how the manager should respond?

A) Determine if the data still exists by inspecting to ascertain if the laptop has already been wiped and if the storage team has recent backups.
B) Inform Ann that the laptop was for company data only and she should not have stored personal photos on a company asset.
C) Report the email because it may have been a spoofed request coming from an attacker who is trying to exfiltrate data from the company laptop.
D) Consult with the legal and/or human resources department and check company policies around employment and termination procedures.