To justify the need to invest in a forensic analysis tool, an information security manager should FIRST:
A.
review the functionalities and implementation requirements of the solution.
B.
review comparison reports of tool implementation in peer companies.
C.
provide examples of situations where such a tool would be useful.
D.
substantiate the investment in meeting organizational needs.
Explanation:
Any investment must be reviewed to determine whether it is cost effective and supports the organizational strategy. It is important to review the features and functionalities provided by such a tool, and to provide examples of situations where the tool would be useful, but that comes after substantiating the investment and return on investment to the organization.