Q3
Single choice
Which of the following is a reason why proper handling and reporting of existing evidence are important for the investigation and reporting phases of an incident response?