The security team has determined that the current incident response resources cannot meet management’s objective to secure a forensic image for all serious security incidents within 24 hours. Which of the following compensating controls can be used to help meet management’s expectations?
A. Separation of duties
B. Scheduled reviews
C. Dual control
D. Outsourcing