First response to an incident may involve three different groups of people, and each will have
differing skills and need to carry out differing tasks based on the incident. Who is responsible for
collecting, preserving, and packaging electronic evidence?
A.
System administrators
B.
Local managers or other non-forensic staff
C.
Forensic laboratory staff
D.
Lawyers