Q50
Single choice
After a cybersecurity incident, a judge found that a company did not conduct a proper forensic investigation. The company was ordered to pay penalties.
Which of the following forensic steps would be best to prevent this from happening again?