What term is used to record the order of evidence handling, by whom, and the nature of the handling?

What term is used to record the order of evidence handling, by whom, and the nature of the handling?

• A. Audit trail
• B. Chain of custody
• C. Evidence ledger
• D. Case file

Answer: (B)

The main idea here is keeping a documented, traceable record of how evidence is handled from collection to presentation. This is known as the chain of custody. It is a formal, chronological log that shows every transfer and action performed on the evidence, who performed it, when it happened, and the conditions of handling (for example, how it was packaged, stored, sealed, or transported). This record is crucial for proving the integrity of the evidence and for establishing its admissibility in investigations or court, since it demonstrates that the item hasn’t been altered or tampered with while under someone’s control. For example, a seized hard drive would have entries noting who collected it, the time and place of collection, how it was sealed and transported, who received it in the lab, any imaging or analysis performed, hash values generated, and subsequent access. If the chain of custody is properly maintained, each step is verifiable; if it’s compromised, the evidence could be challenged. Other terms don’t fit as precisely. An audit trail records system activity, which can support integrity but isn’t itself the formal record of who handled physical or digital evidence and how it was managed. An evidence ledger is more of a bookkeeping list of items and basic details, not the complete handling history. A case file is the collection of documents for a case, not the dedicated process that tracks evidence custody.

The main idea here is keeping a documented, traceable record of how evidence is handled from collection to presentation. This is known as the chain of custody. It is a formal, chronological log that shows every transfer and action performed on the evidence, who performed it, when it happened, and the conditions of handling (for example, how it was packaged, stored, sealed, or transported). This record is crucial for proving the integrity of the evidence and for establishing its admissibility in investigations or court, since it demonstrates that the item hasn’t been altered or tampered with while under someone’s control.

For example, a seized hard drive would have entries noting who collected it, the time and place of collection, how it was sealed and transported, who received it in the lab, any imaging or analysis performed, hash values generated, and subsequent access. If the chain of custody is properly maintained, each step is verifiable; if it’s compromised, the evidence could be challenged.

Other terms don’t fit as precisely. An audit trail records system activity, which can support integrity but isn’t itself the formal record of who handled physical or digital evidence and how it was managed. An evidence ledger is more of a bookkeeping list of items and basic details, not the complete handling history. A case file is the collection of documents for a case, not the dedicated process that tracks evidence custody.