Martha, a CHFI professional, is assigned a significant case involving a cyber-attack on a major...

Option D is the best answer because CHFI v11 emphasizes that investigators must follow rules of evidence , search and seizure requirements , privacy and legal compliance , and the role of local/international agencies during cybercrime investigation . In a multi-jurisdictional case, Martha cannot simply access all servers on her own authority. She must ensure that evidence collection is lawful and admissible in each country involved.

Coordinating with local authorities in each jurisdiction is the most defensible approach because it respects local laws, preserves evidence properly, and helps maintain chain of custody. This also aligns with ACPO-style evidence principles that emphasize preserving integrity and acting within proper authority. Collecting evidence without jurisdictional coordination could create legal challenges and risk exclusion of evidence later.

Option A is unsafe and improper for primary evidence handling. Option B ignores consent and legal process. Option C is too limited and may overlook critical evidence outside her own jurisdiction. Therefore, under CHFI legal and procedural objectives, the correct priority is to coordinate with relevant authorities in each jurisdiction before gathering evidence .