OIC Technology & Digital Investigations Flashcards

When an OIC inspector uses a body-worn camera during an inspection, the recording must be:

Answer: Preserved according to agency retention policies and treated as official evidence

Body-worn camera recordings are official records subject to agency retention, disclosure, and evidence policies.

Which best practice prevents unauthorized access to digital evidence stored on an agency server?

Answer: Role-based access controls limiting access to authorized personnel only

Role-based access controls ensure that only personnel with a need-to-know can access digital evidence, reducing tampering and unauthorized disclosure risks.

A suspect's geolocation data from a smartphone app is being used in an OIC investigation. This data is admissible only if:

Answer: It was obtained lawfully through consent, warrant, or other legal authority

Geolocation data must be obtained through lawful means — consent, warrant, or other legal authority — to be admissible in proceedings.

During a digital inspection, an OIC inspector finds evidence of a crime unrelated to the original investigation scope. The correct action is:

Answer: Stop examination of that evidence, document the discovery, and consult legal counsel about expanding the scope

Examining data outside the original legal authority may invalidate evidence, so inspectors must pause and seek legal guidance before proceeding.

What does the term 'digital footprint' refer to in the context of OIC investigations?

Answer: The collection of traceable data an individual leaves through online and electronic activity

A digital footprint encompasses all electronic traces left by an individual, including browsing history, login records, messages, and location data.

When an OIC inspector must testify about digital evidence, their testimony should be based on:

Answer: Personal direct knowledge of how the evidence was collected and handled, supported by documentation

Testimony about digital evidence must be grounded in the inspector's own direct knowledge and supported by documented chain of custody and collection records.