To ensure that information can be traced to the originating event and accountable parties, an...

This should be the first step to ensure that information can be traced to the originating event and accountable parties, as it helps to establish the authenticity, integrity, and reliability of the information. Source information and supporting evidence are the data and documents that provide the context, details, and proof of an information event, such as who, what, when, where, why, and how1. By capturing source information and supporting evidence, an enterprise can link the information to its source and originator, verify its accuracy and completeness, and identify its owner and custodian1. Capturing source information and supporting evidence can also help to comply with the legal and regulatory requirements for information traceability, such as data protection, privacy, audit, and e-discovery2. Capturing source information and supporting evidence is a prerequisite for the other options, such as improving business process controls, reviewing information event logs for potential incidents, and reviewing retention requirements for source information, as these activities depend on the availability and quality of the source information and supporting evidence.