CISM: Certified Information Security ManagerDemo

An unbroken chain of custody documents every collection, transfer, handling, and control of an evidence item. It establishes the item’s provenance and integrity; a compromised chain can render evidence inadmissible. NIST defines chain of custody as tracking evidence through collection, safeguarding, and analysis while documenting each handler, the date and time, and the purpose of transfers.