CISSP: Certified Information Systems Security Professional

Evidence collection requires proper legal authorization and a clearly defined scope before any data is acquired. This establishes that the collection is lawful; chain-of-custody controls and court-admissibility considerations apply after authorized collection begins.