ASTM E1188-2011 Standard Practice for Collection and Preservation of Information and Physical Items by a Technical Investigator 《通过技术调研人员对信息和物理项进行收集和保存的标准操作规程》.pdf

《ASTM E1188-2011 Standard Practice for Collection and Preservation of Information and Physical Items by a Technical Investigator 《通过技术调研人员对信息和物理项进行收集和保存的标准操作规程》.pdf》由会员分享，可在线阅读，更多相关《ASTM E1188-2011 Standard Practice for Collection and Preservation of Information and Physical Items by a Technical Investigator 《通过技术调研人员对信息和物理项进行收集和保存的标准操作规程》.pdf（3页珍藏版）》请在麦多课文档分享上搜索。

1、Designation:E118805 Designation: E1188 11Standard Practice forCollection and Preservation of Information and PhysicalItems by a Technical Investigator1This standard is issued under the fixed designation E1188; the number immediately following the designation indicates the year oforiginal adoption or

2、, in the case of revision, the year of last revision. A number in parentheses indicates the year of last reapproval. Asuperscript epsilon () indicates an editorial change since the last revision or reapproval.1. Scope1.1 This practice covers guidelines for the collection and preservation of informat

3、ion and physical items by any technicalinvestigator pertaining to an incident that can be reasonably expected to be the subject of litigation.1.2For additional standards promulgated by ASTM Committee E-30, see Practices E620, E678, E860, and E1020.1.31.2 This practice recommends generally accepted p

4、rofessional principles and operations, although the facts and issues of eachsituation require consideration, and frequently involve matters not expressly dealt with herein. Deviations from this practice shouldbe based on specific articulable circumstances.1.3 This practice offers a set of instructio

5、ns for performing one or more specific operations. This standard cannot replaceknowledge, skill or ability acquired through appropriate education, training, and experience and should be used in conjunction withsound professional judgment.1.4 This standard does not purport to address all of the safet

6、y concerns, if any, associated with its use. It is the responsibilityof the user of this standard to establish appropriate safety and health practices and determine the applicability of regulatorylimitations prior to use.2. Referenced Documents2.1ASTM Standards:E620Practice for Reporting Opinions of

7、 Scientific or Technical ExpertsE678Practice for Evaluation of Scientific or Technical DataE860Practice for Examining And Preparing Items That Are Or May Become Involved In Criminal or Civil LitigationE1020Practice for Reporting Incidents that May Involve Criminal or Civil Litigation3.Significance a

8、nd Use3.1This2.1 This practice is intended for use by any technical investigator when investigating an incident that can be reasonablyexpected to be the subject of litigation. The intent is to obtain sufficient information and physical items to discover evidenceassociated with the incident and to pr

9、eserve it for later analysis.3.2The2.2 The quality of evidence may change with time, therefore, special effort should be taken to capture and preserveevidence in an expeditious manner. This practice sets forth guidelines for the collection and preservation of evidence for furtheranalysis.32.3 Eviden

10、ce that has been collected and preserved shall be identified with, and be traceable to, the incident. This practice setsforth guidelines for such procedures.4.3. Procedure4.13.1 Documentary InformationCollect information related to events and conditions occurring before, during, or after theincident

11、. Documentary information may be held by any entity associated with the incident. Make a broad search to identifydocuments and, where possible, collect them. Obtain statements as early as feasible from all individuals associated with theincident and recovery activity.4.2Physical EvidenceObtain and p

12、reserve physical items as early as possible. Plan the investigation to protect physicalevidence significant to the incident. The plan should consider the possibility of identity loss, physical loss, deterioration or1This practice is under the jurisdiction of ASTM Committee E30 on Forensic Sciences a

13、nd is the direct responsibility of Subcommittee E30.11 on InterdisciplinaryForensic Science Standards.Current edition approved AprilSept. 1, 2005.2011. Published May 2005.October 2011. Originally approved in 1987. Last previous edition approved in 19952005 asE1188 905. DOI: 10.1520/E1188-05.10.1520/

14、E1188-11.1This document is not an ASTM standard and is intended only to provide the user of an ASTM standard an indication of what changes have been made to the previous version. Becauseit may not be technically possible to adequately depict all changes accurately, ASTM recommends that users consult

15、 prior editions as appropriate. In all cases only the current versionof the standard as published by ASTM is to be considered the official document.Copyright ASTM International, 100 Barr Harbor Drive, PO Box C700, West Conshohocken, PA 19428-2959, United States.destruction of informaion due to envir

16、onmental effect, or recovery and collection activities. When physical items cannot bepreserved in their found state, document it.4.3Photographic DocumentationCommence photographic documentation as soon as possible after the incident. Document thescene of the incident and the condition of items invol

17、ved. If items involved in the incident are disassembled or subjected todestructive testing, each step of the disassembly or testing shall be documented by contemporaneous photographs or videotaping.The preferable photographic technique provides negatives that can be reproduced and enlarged. The date

18、, time, and location of thephotography or videotaping, and identity of the photographer or videotaper, shall be recorded.4.4Collect information related to events and conditions occurring before, during, or after the incident. Documentaryinformation may be held by any entity associated with the incid

19、ent. Make a broad search to identify documents and, where possible,collect them. Obtain statements as early as feasible from all individuals associated with the incident and the recovery activity.3.2 Physical Evidence:3.2.1 Plan the investigation to protect physical evidence significant to the incid

20、ent. The plan should consider the possibility ofidentity loss, physical loss, or the deterioration or destruction of information due to environmental effects or the recovery andcollection activities. For each item considered to be significant to the incident, document, collect and preserve physical

21、items andtheir information content as soon as possible.3.2.2 Document conditions that prevent or interfere with the preservation of any potential evidence in the state in which it wasfound. This might include hazardous or accessibility conditions, weather conditions, or other existing complications.

22、3.2.3 Assign a unique identifier to each item collected and include this information in a label securely attached to the item oras documentation on the items container and enter the identifying information on a log sheet together with a brief description ofthe item. The evidence documentation should

23、 also clearly include any specific details necessary for preservation of the item, suchas temperature control or special handling instructions.3.3 Photographic Documentation:3.3.1 Commence photographic documentation as soon as possible after the incident. Document the scene of the incident andthe co

24、ndition of items involved.3.3.2 Potential evidence should be photographed in the position where it is first observed by the investigator. If items involvedin the incident are disassembled or subjected to destructive testing, each step of the disassembly or testing shall be documentedby contemporaneo

25、us photographs or videotaping.3.3.3 The photographic technique utilized should be of sufficient resolution to preserve the essential aspects of the appearanceof the evidence being photographed, and should also be capable of producing images that can be reproduced and enlarged. Thedate, time, and loc

26、ation of the photography or videotaping, and the identity of the photographer or videotaper shall be documented.3.4 Validation and AuthenticationEvidence and information gathered by investigators must be admissible in the event oflitigation. Validity and authenticity must be established and the chai

27、n of custody traceable. Validity and authenticity of evidenceis established by documentation that defines the relationship of the evidence to the incident. Such documentation includes, but isnot limited to, the following:4.4.1To support the admissibility of evidence and information, the validity and

28、 authenticity must be established and the chainof custody traceable. Validity and authenticity of evidence is established by documentation that defines the relationship of theevidence to the incident. Parts of this documentation may be located within the records of different agencies; however, it is

29、 theintention of this practice that the history of custody should be capable of being reconstructed to reflect the entire lifetime of theevidence. Such documentation includes, but is not limited to, the following:3.4.1 Initial Collection Information. Document the following:43.4.1.1 Identity of the e

30、vidence and any unique labeling,43.4.1.2 Location where the evidence was found,43.4.1.3 Date and time the evidence was found or obtained, and43.4.1.4 Name and addressaffiliation of the individual who initially removed the evidence from the incident scene.4.4.23.4.2 Subsequent Custody Transfer Inform

31、ation:4.4.2.1Names and addresses of the previous custodian and the new custodian,4.4.2.2Modification, handling, testing, and examination to which an item was subjected, while controlled by the previouscustodian, and4.4.2.3Configuration and condition when transferred to the new custodian.5.Contempora

32、neous documentation of the following (information/documentation may not be available all in the samelocation):3.4.2.1 Name and affiliation of each subsequent custodian along with the date of transfer.3.4.2.2 Modification or repackaging of items by each custodian, and3.4.2.3 Configuration and conditi

33、on when transferred to the new custodian.3.5 It is preferred that evidence and documentation should remain unchanged to the fullest extent possible.3.5.1 If transfer of information or items to a more appropriate storage medium is necessary, this is permitted provided thatinformation loss is minimize

34、d.3.5.2 If an agency or company has a written document or evidence retention policy, that policy should be followed. These typesE1188 112of policies are routinely found when dealing with evidence that is potentially hazardous or present in large volumes.4. Keywords5.1forensic engineers; forensic sci

35、ences4.1 evidence collection; evidence documentation; forensic engineers; forensic sciences; photographic documentation; technicalinvestigatorASTM International takes no position respecting the validity of any patent rights asserted in connection with any item mentionedin this standard. Users of thi

36、s standard are expressly advised that determination of the validity of any such patent rights, and the riskof infringement of such rights, are entirely their own responsibility.This standard is subject to revision at any time by the responsible technical committee and must be reviewed every five yea

37、rs andif not revised, either reapproved or withdrawn. Your comments are invited either for revision of this standard or for additional standardsand should be addressed to ASTM International Headquarters. Your comments will receive careful consideration at a meeting of theresponsible technical commit

38、tee, which you may attend. If you feel that your comments have not received a fair hearing you shouldmake your views known to the ASTM Committee on Standards, at the address shown below.This standard is copyrighted by ASTM International, 100 Barr Harbor Drive, PO Box C700, West Conshohocken, PA 1942

39、8-2959,United States. Individual reprints (single or multiple copies) of this standard may be obtained by contacting ASTM at the aboveaddress or at 610-832-9585 (phone), 610-832-9555 (fax), or serviceastm.org (e-mail); or through the ASTM website(www.astm.org). Permission rights to photocopy the standard may also be secured from the ASTM website (www.astm.org/COPYRIGHT/).E1188 113