Glossary: Incident Response and Resilience

chain of custody

Also written: custody log

A written record of everyone who held a piece of evidence, when, what they did with it and where it went next. A gap in it lets a lawyer argue that the evidence could have been changed.