In addition to the Legal Department, with what company function must the collection of physical evidence be
coordinated if an employee is suspected?

A.
Human Resources

B.
Industrial Security

C.
Public Relations

D.
External Audit Group

Explanation:
If the incident response team determines that a crime has been carried out, senior management should be
informed immediately. If the suspect is an employee, a human resources representative must be called right
away.
Incorrect Answers:
B: Industrial Security does not need to be involved when an employee is suspected of a crime.
C: Public Relations does not need to be involved when an employee is suspected of a crime.
D: The External Audit Group does not need to be involved when an employee is suspected of a crime.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 1035