Because of the nature of information that is stored on the computer, the investigation and
prosecution of computer criminal cases have specific characteristics, one of which is:

A.
The information is intangible.

B.
The investigation does not usually interfere with the normal conduct of the business of an
organization.

C.
Evidence is usually easy to gather.

D.
Investigators and prosecutors have a longer time frame for the investigation.

Explanation:
The information is stored in memory on the computer and is intangible as opposed to a physical
object. Answer a is incorrect since investigators and prosecutors are under time pressure to gather
evidence and proceed to prosecution. If the suspect is alerted, he or she may do damage to the
system or destroy important evidencE . Search warrants may have to be obtained by law
enforcement to search the suspects home and workplace and seize computers and disks. Answer c is
incorrect since an investigation will interfere with the normal conduct of business. Some of the ways
in which an investigation may affect an organization are: The organization will have to provide
experts to work with law enforcement. Information key to the criminal investigation may be coresident on the same computer system as information critical to the dayto – day operation of the
organization. Proprietary data may be subject to disclosure. Management may be exposed if they
have not exercised Due Care to protect information resources. There may be negative publicity that
will be harmful to the organization. Answer d is incorrect. Evidence is difficult to gather since it is
intangible and easily subject to modification or destruction.