Evidence Integrity – It is vital the evidences integrity can not be questioned, we do this with
hashes. Any forensics is done on copies and never the originals, we check hash on both original and
copy before and after the forensics. Chain of Custody – Chain of custody form, this is done to prove
the integrity of the data. No tampering was done. Who handled it? When did they handle it? What did
they do with it? Where did they handle it?