Organizations or incident response teams need to protect the evidence for any future legal actions that may be taken against perpetrators that intentionally attacked the computer system. EVIDENCE PROTECTION is also required to meet legal compliance issues. Which of the following documents helps in protecting evidence from physical or logical damage:
The Chain-of-Custody document is essential in protecting evidence from physical or logical damage. It tracks the evidence's handling, transportation, and storage, ensuring that the evidence remains untampered and is handled by authorized individuals only. Maintaining a proper Chain-of-Custody is crucial for legal proceedings to establish the integrity and authenticity of the evidence.
B: Chain of custody