Flashcard 11 - 220-1102 Operational Procedures Flashcard Set for the CompTIA A+ Core Series Exam

a set of measures that proves evidence has maintained integrity during an incident response

Chain of custody provides a means to ensure that no part of evidence has changed while it is being handled. It provides the names of evidence handlers, a record of what was done with the evidence and when it was done, as well as other pertinent information. It ensures nothing has been tampered with to influence the outcome of an investigation.