A company is facing penalties for failing to effectively comply with e-discovery requests. Which of the following could reduce the overall risk to the company from
this issue?

A.
Establish a policy that only allows filesystem encryption and disallows the use of individual file encryption.

B.
Require each user to log passwords used for file encryption to a decentralized repository.

C.
Permit users to only encrypt individual files using their domain password and archive all old user passwords.

D.
Allow encryption only by tools that use public keys from the existing escrowed corporate PKI.