Company XYZ plans to donate 1,000 used computers to a local school. The company has a large
research and development section and some of the computers were previously used to store
proprietary research.
The security administrator is concerned about data remnants on the donated machines, but the
company does not have a device sanitization section in the data handling policy.
Which of the following is the BEST course of action for the security administrator to take?

A.
Delay the donation until a new policy is approved by the Chief Information Officer (CIO), and
then donate the machines.

B.
Delay the donation until all storage media on the computers can be sanitized.

C.
Reload the machines with an open source operating system and then donate the machines.

D.
Move forward with the donation, but remove all software license keys from the machines.