A company is facing penalties for failing to effectively comply with e-discovery requests. Which of the following could reduce the overall risk to the company from this issue?
A . Establish a policy that only allows filesystem encryption and disallows the use of individual file encryption.
B . Require each user to log passwords used for file encryption to a decentralized repository.
C . Permit users to only encrypt individual files using their domain password and archive all old user passwords.
D . Allow encryption only by tools that use public keys from the existing escrowed corporate PK
Answer: D