Company XYZ has experienced a breach and has requested an internal investigation be
conducted by the IT Department. Which of the following represents the correct order of the
investigation process?

A.
Collection, Identification, Preservation, Examination, Analysis, Presentation.

B.
Identification, Preservation, Collection, Examination, Analysis, Presentation.

C.
Collection, Preservation, Examination, Identification, Analysis, Presentation.

D.
Identification, Examination, Preservation, Collection, Analysis, Presentation.