An information security manager is developing evidence preservation procedures for an incident response plan.
Which of the following would be the BEST source of guidance for requirements associated with the procedures?
A . IT management
B . Legal counsel
C . Executive management
D . Data owners
Answer: D