Which of the following needs to be documented to preserve evidences for presentation in court? 

Answer options:

A. Separation of duties
B. Account lockout policy
C. Incident response policy
D. Chain of custody

D