A customer, Joe, has a corporate laptop that his teenage son used over the weekend. He thinks the laptop now has illegal material because of strange websites on his browser's home page. Joe brings…

Determining chain of custody is an important step in evidence handling, but it occurs after the initial report has been made and the situation is being formally managed by the appropriate parties.

Reporting through proper channels first ensures that management, legal counsel, and potentially law enforcement are notified according to established procedures, protecting the technician and the organization from liability. It also ensures that any evidence is preserved correctly before further actions are taken.

Being culturally sensitive is an interpersonal conduct standard applicable throughout a customer interaction, not a procedural first step when suspected illegal content is discovered.

Avoiding being judgmental is appropriate general conduct, but when illegal content is suspected, the technician has a professional and legal obligation to report it regardless of personal opinions about the situation.