ExamGecko
Question list
Search
Search

Question 236 - CISM discussion

Report
Export

When collecting admissible evidence, which of the following is the MOST important requirement?

A.
Need to know
Answers
A.
Need to know
B.
Preserving audit logs
Answers
B.
Preserving audit logs
C.
Due diligence
Answers
C.
Due diligence
D.
Chain of custody
Answers
D.
Chain of custody
Suggested answer: D

Explanation:

Chain of custody is the MOST important requirement when collecting admissible evidence, because it ensures the integrity and authenticity of the evidence by documenting its history, handling, and storage. Chain of custody records who, what, when, where, why, and how the evidence was collected, analyzed, and preserved. Without a proper chain of custody, the evidence may be challenged or rejected in a court of law.Need to know, preserving audit logs, and due diligence are important aspects of evidence collection, but they are not as critical as chain of custody.Reference= CISM Review Manual, 16th Edition, page 3031; CISM Review Questions, Answers & Explanations Manual, 10th Edition, page 1492 The most important requirement when collecting admissible evidence is the chain of custody. The chain of custody is a documented record of who had control of the evidence at any given time, from the point of collection until the evidence is presented in court. This is important in order to ensure the evidence can be authenticated and is not subject to tampering or any other form of interference. Other important considerations include need to know, preserving audit logs, and due diligence.

asked 01/10/2024
Josh Rose
40 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first