An organization receives a legal hold request from an attorney. The request pertains to emails related to a disputed vendor contract. Which of the following is the best step for the security team to…

Question

Options

• APublicly disclose the request to other vendors
• BNotify the departments involved to preserve potentially relevant information
• CEstablish a chain of custody starting with the attorney's request
• DBack up the mailboxes on the server and provide the attorney with a copy

• A
  6% (2)
• B
  72% (23)
• C
  16% (5)
• D
  6% (2)

Explanation

The first step for the security team when receiving a legal hold request is to notify the relevant departments to preserve all potentially relevant information. This ensures that no data is altered, deleted, or otherwise tampered with, which is critical for maintaining the integrity of the evidence. Preserving information includes emails, documents, and any other data that might be relevant to the legal matter. Establishing a chain of custody and backing up data are also important steps, but notifying the involved parties is the immediate priority to prevent data loss.

No community discussion yet for this question.