The security team has determined that the current incident response resources cannot meet management’s objective to secure a forensic image for all serious security incidents within 24 hours.
Which of the following compensating controls can be used to help meet management’s expectations?
A . Separation of duties
B . Scheduled reviews
C . Dual control
D . Outsourcing
Answer: D