What is the purpose of maintaining a chain of custody for digital evidence?

• A. To speed up data collection.
• B. To document the provenance and handling of evidence to ensure admissibility.
• C. To store data in the cloud.
• D. To encrypt the evidence at rest.

Answer: (B)

Maintaining a chain of custody provides a documented trail of digital evidence that records every person who handled it, every transfer or movement, and the conditions under which it was stored or analyzed. This provenance, often supported by timestamps, storage locations, and integrity checks like hashes, is what lets you prove that the evidence you present in court is the same item that was collected and has not been altered or tampered with. The core purpose is to establish authenticity and reliability, ensuring the evidence is admissible and credible under legal scrutiny. Other options don’t address this verifiable history of handling and integrity, which is why they don’t fit the goal of a chain of custody.