https://csrc.nist.gov/glossary/term/chain_of_custody
Definition(s):
A process that tracks the movement of evidence through its collection, safeguarding, and analysis lifecycle by documenting each person who handled the evidence, the date/time it was collected or transferred, and the purpose for the transfer.
Source(s):
CNSSI 4009-2015 from NIST SP 800-72
NIST SP 800-72 under Chain of Custody
A process that tracks the movement of evidence through its collection, safeguarding, and analysis lifecycle by documenting each person who handled the evidence, the date/time it was collected or transferred, and the purpose for any transfers.
Source(s):
NIST SP 800-101 Rev. 1 under Chain of Custody
