CISSP All Domains Practice test 13

Evidence Integrity – It is vital the evidences integrity can not be questioned, we do this with hashes. Any forensics is done on copies and never the originals, we check hash on both original and copy before and after the forensics. Chain of Custody – Chain of custody form, this is done to prove the integrity of the data. No tampering was done. Who handled it? When did they handle it? What did they do with it? Where did they handle it?