A technician needs to document who had possession of evidence at every step of the process. Which of the following does this process describe?

Rights management refers to controlling access to digital content and defining what actions users can perform, not tracking evidence possession.

An audit trail is a chronological record of system activities, users, and events, but it doesn't specifically track the physical or digital possession of evidence by individuals.

Chain of custody is a critical forensic procedure that meticulously documents the chronological sequence of possession, transfer, analysis, and disposition of evidence. This documentation proves the evidence's integrity and prevents tampering or contamination, making it admissible in legal or investigative contexts.

Data integrity refers to the accuracy and consistency of data over its entire lifecycle, which chain of custody helps maintain for evidence, but it's not the process of documenting possession itself.