Because of the nature of information that is stored on the computer, the
investigation and prosecution of computer criminal cases have specific
characteristics, one of which is:

A.
The information is intangible.

B.
The investigation does not usually interfere with the normal conduct
of the business of an organization.

C.
Evidence is usually easy to gather.

D.
Investigators and prosecutors have a longer time frame for the
investigation.

Explanation:
The information is stored in memory on the computer and is
intangible as opposed to a physical object. Answer a is incorrect
since investigators and prosecutors are under time pressure to
gather evidence and proceed to prosecution. If the suspect is alerted,
he or she may do damage to the system or destroy important

evidencE . Search warrants may have to be obtained by law
enforcement to search the suspects home and workplace and seize
computers and disks. Answer c is incorrect since an investigation
will interfere with the normal conduct of business. Some of the ways
in which an investigation may affect an organization are:
The organization will have to provide experts to work with law
enforcement.
Information key to the criminal investigation may be co-resident
on the same computer system as information critical to the dayto -day operation of the organization.
Proprietary data may be subject to disclosure.
Management may be exposed if they have not exercised Due
Care to protect information resources.
There may be negative publicity that will be harmful to the
organization.
Answer d is incorrect. Evidence is difficult to gather since it is
intangible and easily subject to modification or destruction.