Chain of Custody

A process that tracks the movement of evidence through its collection, safeguarding, and analysis lifecycle by documenting each person who handled the evidence, the date/time it was collected or transferred, and the purpose for the transfer.  

See CNSSI 4009-2015 (NIST SP 800-72), NIST SP 800-72 and NIST SP 800-101 Rev. 1 under Chain of Custody for more information. 

Share this Post