What is the correct action to preserve evidence integrity during a response?

• A. Alter files to fit narrative.
• B. Delay securing items until after all witnesses are interviewed.
• C. Secure, document, and label items to maintain an audit trail.
• D. Share all evidence publicly immediately.

Answer: (C)

Preserving evidence integrity comes from maintaining a clear, verifiable record of every item and action that could affect it. The best practice is to secure items at the scene, document every step and transfer, and label and seal objects so their origin and handling history are traceable. This creates an audit trail that investigators can follow to determine what happened and ensure the evidence remains admissible and trustworthy. Altering files would taint the record and undermine credibility; delaying securing items risks contamination or loss; sharing evidence publicly would violate privacy and reveal sensitive details. By securing, documenting, and labeling everything, you establish a reliable chain of custody that supports accurate reconstruction of events.