ISC2 CISSP Practice Question

The correct answer is to implement a secure storage facility with access controls, documentation of evidence handling, and physical protection measures. When storing digital evidence, maintaining the Chain of Custody (CoC) is paramount to ensure admissibility in court proceedings. This means documenting who has handled the evidence, when they accessed it, and for what purpose. Additionally, physical security measures such as controlled access to the storage facility and tamper-evident containers provide protection against unauthorized access or manipulation. Temperature and humidity controls are important for certain types of physical evidence but are secondary to CoC documentation for digital evidence. While integrity checks are valuable, they should be conducted in a manner that doesn't alter the original evidence. Making copies for analysis is a good practice but doesn't replace proper storage procedures. Remote cloud storage introduces potential CoC challenges that could compromise admissibility.