In order to preserve a proper chain of custody of evidence?

A.
Evidence has to be collected following predefined procedures in accordance with all laws and
legal regulations

B.
Law enforcement officials should be contacted for advice on how and when to collect critical
information

C.
Verifiable documentation indicating the sequence of individuals who have handled a piece of
evidence should be available.

D.
Log files containing information regarding an intrusion are retained for at least as long as normal
business records, and longer in the case of an ongoing investigation.