Which group often works as part of a team to secure an organization's computers and networks?

• A. Incident responders
• B. Forensics investigators
• C. System administrators
• D. Security analysts

Answer: (B)

When organizations defend their networks, collaborating across roles is essential, and forensic investigators often play a key part of that team. They bring specialized skills in preserving and analyzing digital evidence from breaches or suspicious activity, which helps the group understand exactly what happened, how attackers moved, and what data or systems were affected. This information guides containment and recovery actions and informs changes to prevent recurrence, such as improved logs, stricter access controls, and better incident playbooks. While other professionals focus on monitoring, maintenance, and immediate threat response, the forensic perspective is crucial for validating findings, preserving chain of custody, and driving lessons learned that strengthen future defenses.