[Solved]Learning Objectives Outcomes Describe Requirements Chain Custody Differentiate Roles Peopl Q37054831

LearningObjectives and Outcomes

• Describe the requirements of a chain of custody.
• Differentiate the roles of people involved in evidence seizureand handling.

AssignmentRequirements

You are a digitalforensics intern at Azorian Computer Forensics, a privately ownedforensics investigations and data recovery firm in the Denver,Colorado area. Azorian has been called to a client’s site to workon a security incident involving five laptop computers. You areassisting Pat, one of Azorian’s lead investigators. Pat is workingwith the client’s IT security staff team leader, Marta, and an ITstaff member, Suhkrit, to seize and process the five computers.Marta is overseeing the process, whereas Suhkrit is directlyinvolved in handling the computers.

The computers must beremoved from the employees’ work areas and moved to a securelocation within the client’s premises. From there, you will assistPat in preparing the computers for transporting them to the Azorianfacility.

BACKGROUND

Chain ofCustody

Evidence is always inthe custody of someone or in secure storage. The chain of custodyform documents who has the evidence in their possession at anygiven time. Whenever evidence is transferred from one person toanother or one place to another, the chain of custody must beupdated.

A chain of custodydocument shows:

• What was collected (description, serial numbers, and soon)
• Who obtained the evidence
• Where and when it was obtained
• Who secured it
• Who had control or possession of it

The chain of custodyrequires that every transfer of evidence be provable that nobodyelse could have accessed that evidence. It is best to keep thenumber of transfers as low as possible.

Chain ofCustody Form

Fields in a chain ofcustody form may include the following:

• Case
• Reason of evidence obtained
• Name
• Title
• Address from person received
• Location obtained from
• Date/time obtained
• Item number
• Quantity
• Description

For eachevidence item, include the following information:

• Item number
• Date
• Released by (signature, name, title)
• Received by (signature, name, title)
• Purpose of chain of custody

For thisassignment:

Walk through theprocess of removal of computers from employees’ work areas to theclient’s secure location and eventually to the Azorian facility.Who might have possession of the computers during each step? Sketcha rough diagram or flow chart of the process.

Each transfer ofpossession requires chain of custody documentation. Each transferrequires a signature from the person releasing the evidence and theperson receiving the evidence. Include the from/to information inyour diagram or flow chart

Expert Answer

---

Answer to Learning Objectives and Outcomes Describe the requirements of a chain of custody. Differentiate the roles of people invo… . . .