When verifying the integrity of a bit-for-bit copy of digital evidence, hashing algorithms are used.
The primary factors in selecting a hashing algorithm are speed and collision resistance.
MD5 (Message Digest 5): While not cryptographically secure for all modern applications due to collision vulnerabilities, it is very fast and still acceptable in forensic integrity verification where speed is critical and the probability of collision is negligible for one-time checks.
SHA-1 / SHA-2: Provide stronger cryptographic assurance but are slower than MD5. They are preferred for long-term integrity assurance but not when processing speed is the top priority.
AES (Advanced Encryption Standard): AES is an encryption algorithm, not a hashing algorithm, and therefore is not appropriate for integrity verification.

The best source of evidence to determine whether a new system meets expected requirements is User Acceptance Testing (UAT). UAT is conducted by the end users to verify that the system meets the business requirements and functions as expected in a real-world environment, making it the most direct and reliable evidence of system performance.

Periodic access recertification ensures that user access rights are regularly reviewed and validated against current job roles, allowing inappropriate or outdated access to be identified and removed when users change departments or leave the organization.

The greatest concern for the IS auditor would be inappropriate access rights to transaction record logs. Unauthorized access to these logs can lead to data manipulation, tampering, or concealment of malicious activities, which would compromise the integrity of the organization's security and audit process.

The IS auditor should remain independent and objective. The best way to provide value without interfering in management decisions is to review and comment on the criteria used for evaluating alternatives, ensuring they are complete, relevant, and aligned with business needs.
Option A: Identifying the "best" option compromises independence.
Option B: Deferring to the audit report misses the chance to add timely value.
Option D: Requesting another alternative intrudes on management's role.
Option C: Correct - ensures appropriate evaluation criteria without biasing decisions.