Which of the following is the MOST critical to ensuring evidence from a cyber crime remains legally admissible?

Question

Options

• AMaintaining the confidentiality of the evidence
• BConsulting a certified forensics investigator
• CInvolving law enforcement
• DMaintaining the integrity of evidence handling

• A
  8% (4)
• B
  4% (2)
• C
  15% (7)
• D
  73% (35)

Explanation

Maintaining the integrity of evidence handling - through a documented, unbroken chain of custody - is the cornerstone of legal admissibility; if evidence is tampered with, improperly stored, or its handling is unaccounted for, courts will likely reject it regardless of what it proves.

Why the distractors fall short:

• A (Confidentiality) matters for privacy and investigation security, but confidentiality alone doesn't make evidence admissible - a secret piece of evidence with no custody trail is still inadmissible.
• B (Certified forensics investigator) is a best practice and adds credibility, but is not strictly required for admissibility - what matters is how evidence was handled, not solely who handled it.
• C (Involving law enforcement) is often appropriate but not universally required (e.g., civil litigation, internal investigations), and law enforcement involvement doesn't automatically guarantee admissibility.

Memory tip: Think of evidence like a blood sample - even if it's the smoking gun, a broken or undocumented chain of custody makes it legally poisoned. The acronym C.O.C. (Chain of Custody) = Courtroom-OK Evidence.

No community discussion yet for this question.