QuestionQ375

Procedures and Methodology

During a data-breach investigation at a healthcare provider in Atlanta, the forensic team obtains evidence from a suspect server while under heightened legal scrutiny. To ensure the acquisition process can be independently reviewed, defended, and validated throughout judicial proceedings, which data-acquisition guideline should receive the strongest emphasis?

  • A Define the purpose and requirements of data collection before acquisition
  • B Document the entire data acquisition process and ensure records are signed and dated
  • C Capture volatile data before non-volatile data
  • D Comply with legal and ethical data protection laws and regulations
Explanation

Complete documentation of every acquisition action, with records signed and dated, creates an auditable record of how digital evidence was collected and handled. This supports chain of custody, independent validation, and legal defensibility.

Community Discussion

No comments yet. Be the first to start the discussion!