An organization disposes of leased disks that stored confidential information. What evidence is most relevant to the auditor?

1. Approved sanitization records tied to the specific media and verified method
2. The purchase date of an unrelated replacement server
3. A verbal statement that the disks were no longer needed
4. Only the removal of the devices from an inventory screen