CISA · Question #342
During the forensic investigation of a cyberattack involving credit card data, which of the following is MOST important to ensure?
The correct answer is C. Proper chain of custody is maintained. In any forensic investigation, maintaining a proper chain of custody is paramount. It ensures that all evidence is collected, documented, handled, and preserved in a legally defensible manner, which is critical if the case proceeds to litigation or regulatory review…
Question
During the forensic investigation of a cyberattack involving credit card data, which of the following is MOST important to ensure?
Options
- AAll staff in the payment card unit are interviewed
- BAdequate card security features are activated
- CProper chain of custody is maintained
- DThe company's payment platforms are blocked
How the community answered
(40 responses)- A5% (2)
- B3% (1)
- C83% (33)
- D10% (4)
Explanation
In any forensic investigation, maintaining a proper chain of custody is paramount. It ensures that all evidence is collected, documented, handled, and preserved in a legally defensible manner, which is critical if the case proceeds to litigation or regulatory review. Interviewing staff (A), checking card security features (B), and blocking payment platforms (D) may be relevant actions but are secondary to evidence integrity, which underpins the entire investigation.
Topics
Community Discussion
No community discussion yet for this question.