Which term refers to the records that show when, where, and by whom evidence was collected?

• A. Chain of Custody
• B. Audit Trail
• C. Evidence log
• D. Logbook

Answer: (A)

The main idea here is preserving the documented path of evidence: who handled it, when it was collected, and where it has been kept. This is known as the chain of custody. Keeping a clear chain of custody ensures the evidence remains authentic and untampered from the moment it is collected to when it is presented or analyzed. A proper chain-of-custody record will note the item’s description and unique identifier, the exact dates and times of collection and transfers, locations, and the names or initials of every person who handled the item, plus any changes in storage conditions or handling procedures. When these records are thorough, they support the integrity and admissibility of the evidence in investigations and potential legal proceedings.

An audit trail, by contrast, tracks activities within a system—such as user actions or system events—rather than the custody and handling of evidence itself. An evidence log is typically a simpler list of items with basic details but may not capture the complete transfer history or each individual who touched the evidence. A logbook is a general-purpose record book and isn’t specifically designed to document the formal custody chain of evidence.