In Response to an Incident, How Should Chain of Custody

Question

Examlex · Accepted Answer

The Answer is All collected data must be carefully processed and tracked so it does not leave official hands at any point in the forensics process. Typically, documentation used to track chain of custody describes exactly what the evidence is, when it was collected, who collected it, its condition, and how it was secured. If at any point in the process you have custody of evidence, be sure to sign off on a chain of custody document, and obtain a signature from the next person in line when you hand over custody of the evidence.

In Response to an Incident, How Should Chain of Custody

Definitions: