During incident recovery, a 'chain of custody' log is MOST important for:
-
A
Tracking which systems were restored first
-
B
Preserving evidence integrity for potential legal proceedings
-
C
Documenting backup restoration steps
-
D
Monitoring system performance after recovery