CSI Evidence Collection & Chain of Custody 1 — Questions and Answers
Question 1: What is the primary purpose of maintaining a 'chain of custody' for evidence in a security investigation?
- To document every person who handled the evidence from collection to presentation (Correct answer)
- To ensure evidence is stored in a locked room at all times
- To limit the number of investigators who can access physical evidence
- To create a backup copy of all evidence collected on scene
Correct answer: To document every person who handled the evidence from collection to presentation
Chain of custody documentation proves that evidence has not been tampered with, altered, or contaminated between collection and use in proceedings.
Question 2: When collecting physical evidence at a security incident scene, what should an investigator do first?
- Document and photograph the scene before touching anything (Correct answer)
- Package all visible evidence immediately to prevent loss
- Interview nearby witnesses before any evidence is collected
- Contact law enforcement to take over the scene
Correct answer: Document and photograph the scene before touching anything
Documenting and photographing the scene before collection preserves the original state of evidence and its spatial relationships.
Question 3: Which type of evidence is considered 'best evidence' in a security investigation?
- The original document or item, rather than a copy (Correct answer)
- A sworn statement from the most credible witness
- A surveillance video recording of the incident
- A forensic report prepared by a certified expert
Correct answer: The original document or item, rather than a copy
The best evidence rule requires that the original document or item be presented rather than a duplicate, unless the original is unavailable.
Question 4: What is 'transient evidence' in the context of physical security investigations?
- Evidence that is temporary in nature and must be collected immediately (Correct answer)
- Evidence discovered during unrelated investigations
- Background information about a suspect's past behavior
- Secondary documentation created after the incident
Correct answer: Evidence that is temporary in nature and must be collected immediately
Transient evidence, such as odors, temperature, or melting materials, exists only briefly and must be documented or collected before it disappears.
Question 5: In a security investigation, 'circumstantial evidence' differs from 'direct evidence' in that it:
- Requires inference to connect it to a conclusion rather than proving it directly (Correct answer)
- Is always less reliable than witness testimony
- Cannot be used in legal or administrative proceedings
- Must be collected by law enforcement rather than private investigators
Correct answer: Requires inference to connect it to a conclusion rather than proving it directly
Circumstantial evidence supports a conclusion through logical inference rather than directly demonstrating the fact in question.
Question 6: When packaging physical evidence, why should each item be placed in a separate container?
- To prevent cross-contamination between evidence items (Correct answer)
- To make evidence easier to photograph at the lab
- To reduce the total weight of the evidence package
- To comply with fire safety regulations for evidence storage
Correct answer: To prevent cross-contamination between evidence items
Separate packaging prevents trace materials from one item contaminating another, which could compromise forensic analysis.
CSI Evidence Collection & Chain of Custody 1
What is the primary purpose of maintaining a 'chain of custody' for evidence in a security investigation?