Chain of Custody is described as which of the following?

• A. A method for organizing digital files by date
• B. A crucial process to ensure that all of the evidence collected in a case has not been tampered with by an unauthorized individual and the original evidence remains unchanged
• C. An approach for limiting access to devices
• D. A process for collecting evidence from various sources

Answer: (B)

Chain of custody is the documented, verifiable trail that preserves evidentiary integrity from collection to presentation. It ensures that every person who handles the evidence, when they handled it, and the conditions under which it was stored or transported are recorded, so the original item or data remains unchanged and can be authenticated. This often involves seals, transfer logs, access controls, and cryptographic hashes to demonstrate that no tampering occurred. Maintaining this chain is essential for the evidence to be admissible in court and for the forensic findings to be trusted. Other options describe organizing files, restricting access, or collecting evidence, but they do not capture the process of maintaining and proving the integrity and origin of evidence throughout its lifecycle.