SSCP: Systems Security Certified Practitioner

Question

If an employee’s computer was used by a fraudulent employee to commit a crime, its hard disk may be seized as evidence. Once the investigation is complete, it would follow the normal Evidence Life Cycle steps. In this case, which of the following is not included in the Evidence Life Cycle?

Explanation

The Evidence Life Cycle covers the identification and collection of evidence, secure preservation and transportation, and forensic analysis. Evidence must remain available and protected for investigative or legal purposes; destruction is not a standard life-cycle step.

SSCP: Systems Security Certified Practitioner

AstroTutor

Notes

Readiness

QuestionQ36

Community Discussion