Documentation

• Assume that your notes and evidence will be used in a legal proceeding.

• Keep detailed notes.

  • Use a Bound notebook.
  • Date and sign pages.
  • Electronic notes are optional.
  • List actions and observations.
  • Document all preserved evidence.

• Document the Chain of Custody.

  • Who has the original evidence?
  • Who has backups?
  • How are they stored and handled?
  • How has the integrity been preserved and verified?

Notes: