Which action best supports preserving incident evidence during an event?

• A. Allowing all personnel access to the secure area.
• B. Documenting all activities and controlling access to preserve evidence.
• C. Sharing every piece of information publicly immediately.
• D. Ignoring chain-of-custody procedures.

Answer: (B)

Preserving incident evidence hinges on controlling access and recording every interaction with the scene to keep a reliable record of its handling. Limiting entry to authorized personnel and documenting all activities creates a clear chain of custody, showing who touched what, when, and why. This protects the evidence from contamination, loss, or tampering and ensures investigators can trust its integrity and admissibility.

Allowing everyone access would risk contamination and misplacement. Publicly sharing information immediately can expose sensitive details and compromise the investigation. Ignoring chain-of-custody procedures removes the traceability that proves the evidence hasn’t been altered or mishandled.