Define chain of custody and its significance in handling sensitive information.

• A. The chain of command for data retrieval.
• B. A method for encrypting data at rest.
• C. The documented, traceable transfer of evidence or data to preserve integrity and admissibility.
• D. A process for tag-and-bag classification.

Answer: (C)

Chain of custody means the documented, traceable transfer of evidence or data from collection through all handling stages to its final disposition. In handling sensitive information, this means recording who collected the data, when and where it was moved, every person who accessed it, how it was transmitted or stored, and where it sits at each step. This creates an auditable trail that helps prove the data hasn’t been altered and remains authentic, which is crucial for legal admissibility, investigations, and regulatory compliance. A proper chain of custody involves secure collection, tamper‑evident handling or digital provenance records, strict access controls, and careful logging of all transfers and storage. The significance is that, if the data or evidence is ever challenged, you can demonstrate its integrity and provenance. Other practices like following a data retrieval chain of command, encrypting data at rest, or simply tagging and labeling assets do not establish this documented transfer trail to the same extent.