What is 'forensics readiness,' and what practices contribute to it?

• A. Maintaining incident response diagrams only.
• B. Having capabilities and processes ready to collect and preserve evidence; includes tools, procedures, and trained personnel.
• C. Encrypting all data at rest and in transit exclusively.
• D. Only performing forensics after a major breach.

Answer: (B)