Which of the following must be maintained throughout the forensic evidence life cycle when dealing with a piece of evidence?

Acceptable use policies govern how users interact with IT resources but are not specific to the handling and preservation of forensic evidence.

The chain of custody is a document or process that records the history of who has had physical possession of a piece of evidence, when, and for what purpose, from the moment it is collected until it is presented in court. Maintaining a strict chain of custody is crucial to prove that the evidence has not been tampered with and to ensure its legal admissibility.

A security policy outlines an organization's security posture and rules but is not the specific mechanism for tracking the handling of individual pieces of evidence.

Information management is a broad discipline concerning the organization and storage of information, which is too general to specifically address the integrity of forensic evidence.