Evidence of normal and abnormal system activity

Log files can help provide evidence of normal and abnormal system activity, as well as valuable information on how well security controls are doing their jobs. Regulation, policy, or log volume might dictate how much log information to keep. If a log file is subject to litigation, how long must a company keep it? O A) At least one year OB) Until litigation starts O C) A minimum of seven years OD) Until the case is over