Chain of Custody

Video Activity
Join over 3 million cybersecurity professionals advancing their career
Sign up with
or

Already have an account? Sign In »

Time
1 hour 49 minutes
Difficulty
Intermediate
CEU/CPE
2
Video Transcription
00:00
We previewed it in other modules and other lessons,
00:04
and now we're getting to it. We're going to talk about in module and less than 2.4,
00:10
the chain of custody in the concept of chain of custody.
00:14
In this video, we're going to talk about what is chain of custody and why is it so important?
00:21
The National Institute of Standards and Technology defines chain of custody as a process that tracks the movement of evidence through its collection, safeguarding and analysis lifecycle by documenting each person who handles the evidence, the date and time it was collected or transferred. And the purpose for any transfers.
00:41
Chain of custody is so vital
00:44
because without a proper documentation off, who had the evidence why they had the evidence what they did with the evidence
00:54
when they did that with the evidence, it's impossible to separate
00:58
activities taken
01:00
bye,
01:00
the analysis team and the experts
01:03
and the normal operation of the evidence.
01:07
It's also very hard to
01:11
argue that some piece of evidence wasn't manipulated
01:18
if there's no tracking, no way to identify what occurred,
01:23
how the safeguarding occurred,
01:26
what was done during the analysis process,
01:29
then
01:30
what's known as the chain of custody being broken will occur
01:34
and the admissibility of the evidence, the reliability of the findings
01:40
will also be called into question.
01:42
So it's
01:44
vital, very important, that
01:48
chain of custody be properly maintained
01:51
because this is the start of that process. This is the start of documentation, and this is where
01:59
the most important piece
02:00
of documentation will occur because a simple break in the chain of custody will affect the admissibility of the evidence.
02:09
In this video we discussed, What is the chain of custody
02:13
and why is it so important?
Up Next
DFIR Investigations and Witness Testimony

This course discusses the role of the expert witness, the process an expert should follow from collection of digital data to reporting, the act of testifying in court, the rules that govern experts and the do’s and don’ts of good testimony.

Instructed By