Answer: C - According to the FTC’s Data Breach Response guidelines, an organization should not destroy evidence of a breach. Destruction of this evidence should not be restricted by the organization. By working alongside a team of experts, including investigators, legal counsel, and those who can identify any vulnerabilities or elaborate upon the incident, the organization can secure systems, correct vulnerabilities, mitigate harm to potentially affected customers and communicate effectively with affected parties.