Definition
Evidence Preservation is the process of protecting digital evidence from alteration, deletion, or degradation to maintain its integrity and admissibility for legal, regulatory, or investigative purposes.
People Also Ask
Common questions about Evidence Preservation answered by our security experts.
Related Terms
Digital Forensics
Digital Forensics is the process of collecting, preserving, analyzing, and presenting digital evidence from computers, networks, and mobile devices in a manner that is legally admissible and maintains chain of custody.
Chain of Custody
Chain of Custody is the documented chronological record that establishes the seizure, control, transfer, analysis, and disposition of physical or electronic evidence in legal or investigative proceedings.
Incident Response
Incident response is the organized approach to addressing and managing the aftermath of a security breach or cyberattack. The goal is to handle the situation in a way that limits damage, reduces recovery time and costs, and prevents future incidents.
Related Reading
Need Help With Evidence Preservation?
Our certified security professionals can help you implement the right evidence preservation strategy for your organization. Get a free assessment today.
Book a Free Consultation