Once a decision is made to further investigate a computer crime incident, which one of the following
is NOT employed?

A.
Identifying what type of system is to be seized.

B.
Identifying the search and seizure team members.

C.
Identifying the cost of damage and plan for their recover.

D.
Determining the risk that the suspect will destroy evidence.

Explanation:
Costs and how to recover are not considered in a computer crime scene incident.