ISM-0138

The integrity of evidence gathered during an investigation is maintained by investigators:
• recording all of their actions
• maintaining a proper chain of custody
• following all instructions provided by relevant law enforcement agencies.

Topic
Maintaining the integrity of evidence
Applicable to
all

History

Priority
should
Mar 2023
The integrity of evidence gathered during an investigation is maintained by investigators: • recording all of their actions • maintaining a proper chain of custody • following all instructions provided by relevant law enforcement agencies.
An existing control relating to maintaining the integrity of evidence gathered during investigations was expanded to include advice to follow ‘all instructions provided by relevant law enforcement agencies’.
Aug 2020
The integrity of evidence gathered during an investigation is maintained by investigators: • recording all of their actions • creating checksums for all evidence • copying evidence onto media for archiving • maintaining a proper chain of custody.
Security control 0138 was modified slightly.
Jul 2020
The integrity of evidence gathered during an investigation is maintained by investigators recording all of their actions and ensuring raw audit trails are copied onto media for archiving.
2015
Agencies should:• transfer a copy of raw audit trails onto media for secure archiving, as well as securingmanual log records for retention• ensure that all personnel involved in the investigation maintain a record of actionsundertaken to support the investigation.
2010
Agencies should:• transfer a copy of raw audit trails onto media for secure archiving, as well as securing manual logrecords for retention• ensure all personnel involved in the investigation maintain a record of actions undertaken to supportthe investigation.
2008
Agencies should: a. transfer a copy of raw audit trails onto media for secure archiving, as well as securing manual log records for retention b. ensure that all staff members involved in the investigation maintain a record of actions undertaken to support the investigation.