What is the primary purpose of preservation during an incident response?
To document the incident response steps taken
To maintain the integrity and evidentiary value of data
To expedite the recovery of systems and normal operations
To facilitate communication among incident response team members