When should event analysis be performed?
A . Only when requested by an auditor
B . Routinely for all events collected on a mission critical system
C . Only at the discretion of an authorized security analyst
D . After an event is triggered by the detection system
Answer: B