Which of the following should be of MOST concern to an IS auditor evaluating a forensics program? 

Answer options:

A. Forensic images are stored on removable media with encryption.
B. Forensic images are only stored for involuntarily terminated employees.
C. Forensic images are only maintained for 12 months.
D. Forensic images are stored on shared disks.

D