Sop Devry

Standard Operating Procedures

DeVry University

August 09, 2011

Standard Operating Procedures

Digital evidence has a significant role in a disclosure of a case. The digital data can be used to explain the history and reconstruction of a case. Therefore, any person that obtains any type of digital evidence should follow the principle of legality and truth. It is important that the individual involved on the procedure does not invade other’s computer information systems illegally. Every person must follow the procedure of digital evidence acquisition and permission. Handle electronic evidence in a secure manner starting from the crime scene to the laboratory, in order to support investigation quickly and correctly.

Secure the area containing the equipment. Do not allow people near any computer or power supply.

Photograph or video the scene. If no camera is available, draw a sketch plan of the system labeling all the cables and ports.

Do not switch the electronic device on, in any circumstance.

If the electronic device is switched on record what appears on the screen. Interpret the situation and decide whether is safer to leave the computer on or if the computer should be turn off.

Attach signed and exhibit labels to all items. Failure to do may create difficulties with continuity and it may result in rejection by the forensic examiners.

Collect evidence the sooner possible, always ensuring that the evidence is not damaged. Also, it is important to maintain the original evidence without modifications.

Collect the basic information of the crime target and use known information to analyze the possible criminal.

Prepare tools for the investigation. Only professional forensics should operate the forensic tools. Forensics must be clearly instructed about the searching mission and items.

Record and preserve chain of custody. Documenting the process in details is important since everything will be used in court.

The duplicate of the computer’s hard...