Q18
Single choice
The security team has determined that the current incident response resources cannot meet management's objective to secure a forensic image for all serious security incidents within 24 hours.
Which of the following compensating controls can be used to help meet management's expectations?