A cybersecurity investigator is conducting a search and seizure operation involving a large data breach. She needs a witness’s signature for the agreement to proceed. She is considering one of her team members as a witness but is unsure whether this would comply with standard procedures. According to best practices in obtaining witness signatures during such operations, what actions should she take?
To ensure the integrity of the search and seizure operation and to avoid any potential bias or conflict of interest during court proceedings, it is best to not involve any team members as witnesses. This approach aligns with the principle of maintaining impartiality and credibility in the investigation process, as team members might be seen as biased, thus compromising the validity of their testimony.
Whoever signs as a witness must have a clear understanding of that role, and may be called upon to provide a witness statement or attend court proceedings.