Q5
Single choice
A cyber-incident response team is responding to a network intrusion incident on a hospital network.
Which of the following must the team prepare to allow the data to be used in court as evidence?