312-49 · Question #466
You are working as an investigator for a corporation and you have just received instructions from your manager to assist in the collection of 15 hard drives that are part of an ongoing…
The correct answer is D. The multi-evidence form should be placed in the report file and the single-evidence forms should. Proper chain of custody documentation requires that the multi-evidence form - which summarizes the entire case - be placed in the case report file for administrative reference. The single-evidence forms, each tied to a specific piece of physical evidence (a hard drive), should…
Question
You are working as an investigator for a corporation and you have just received instructions from your manager to assist in the collection of 15 hard drives that are part of an ongoing investigation. Your job is to complete the required evidence custody forms to properly document each piece of evidence as other members of your team collect it. Your manager instructs you to complete one multi-evidence form for the entire case and a single-evidence form for each hard drive. How will these forms be stored to help preserve the chain of custody of the case?
Options
- AAll forms should be placed in an approved secure container because they are now primary
- BThe multi-evidence form should be placed in an approved secure container with the hard drives
- CAll forms should be placed in the report file because they are now primary evidence in the case
- DThe multi-evidence form should be placed in the report file and the single-evidence forms should
How the community answered
(45 responses)- A7% (3)
- B11% (5)
- C2% (1)
- D80% (36)
Explanation
Proper chain of custody documentation requires that the multi-evidence form - which summarizes the entire case - be placed in the case report file for administrative reference. The single-evidence forms, each tied to a specific piece of physical evidence (a hard drive), should accompany that individual item in its approved secure container. This separation ensures that the physical evidence and its corresponding paperwork are co-located, while the case-level summary remains with the investigative record, maintaining a clear and auditable chain of custody.
Topics
Community Discussion
No community discussion yet for this question.