1、Designation:E118805 Designation: E1188 11Standard Practice forCollection and Preservation of Information and PhysicalItems by a Technical Investigator1This standard is issued under the fixed designation E1188; the number immediately following the designation indicates the year oforiginal adoption or
2、, in the case of revision, the year of last revision. A number in parentheses indicates the year of last reapproval. Asuperscript epsilon () indicates an editorial change since the last revision or reapproval.1. Scope1.1 This practice covers guidelines for the collection and preservation of informat
3、ion and physical items by any technicalinvestigator pertaining to an incident that can be reasonably expected to be the subject of litigation.1.2For additional standards promulgated by ASTM Committee E-30, see Practices E620, E678, E860, and E1020.1.31.2 This practice recommends generally accepted p
4、rofessional principles and operations, although the facts and issues of eachsituation require consideration, and frequently involve matters not expressly dealt with herein. Deviations from this practice shouldbe based on specific articulable circumstances.1.3 This practice offers a set of instructio
5、ns for performing one or more specific operations. This standard cannot replaceknowledge, skill or ability acquired through appropriate education, training, and experience and should be used in conjunction withsound professional judgment.1.4 This standard does not purport to address all of the safet
6、y concerns, if any, associated with its use. It is the responsibilityof the user of this standard to establish appropriate safety and health practices and determine the applicability of regulatorylimitations prior to use.2. Referenced Documents2.1ASTM Standards:E620Practice for Reporting Opinions of
7、 Scientific or Technical ExpertsE678Practice for Evaluation of Scientific or Technical DataE860Practice for Examining And Preparing Items That Are Or May Become Involved In Criminal or Civil LitigationE1020Practice for Reporting Incidents that May Involve Criminal or Civil Litigation3.Significance a
8、nd Use3.1This2.1 This practice is intended for use by any technical investigator when investigating an incident that can be reasonablyexpected to be the subject of litigation. The intent is to obtain sufficient information and physical items to discover evidenceassociated with the incident and to pr
9、eserve it for later analysis.3.2The2.2 The quality of evidence may change with time, therefore, special effort should be taken to capture and preserveevidence in an expeditious manner. This practice sets forth guidelines for the collection and preservation of evidence for furtheranalysis.32.3 Eviden
10、ce that has been collected and preserved shall be identified with, and be traceable to, the incident. This practice setsforth guidelines for such procedures.4.3. Procedure4.13.1 Documentary InformationCollect information related to events and conditions occurring before, during, or after theincident
11、. Documentary information may be held by any entity associated with the incident. Make a broad search to identifydocuments and, where possible, collect them. Obtain statements as early as feasible from all individuals associated with theincident and recovery activity.4.2Physical EvidenceObtain and p
12、reserve physical items as early as possible. Plan the investigation to protect physicalevidence significant to the incident. The plan should consider the possibility of identity loss, physical loss, deterioration or1This practice is under the jurisdiction of ASTM Committee E30 on Forensic Sciences a
13、nd is the direct responsibility of Subcommittee E30.11 on InterdisciplinaryForensic Science Standards.Current edition approved AprilSept. 1, 2005.2011. Published May 2005.October 2011. Originally approved in 1987. Last previous edition approved in 19952005 asE1188 905. DOI: 10.1520/E1188-05.10.1520/
14、E1188-11.1This document is not an ASTM standard and is intended only to provide the user of an ASTM standard an indication of what changes have been made to the previous version. Becauseit may not be technically possible to adequately depict all changes accurately, ASTM recommends that users consult
15、 prior editions as appropriate. In all cases only the current versionof the standard as published by ASTM is to be considered the official document.Copyright ASTM International, 100 Barr Harbor Drive, PO Box C700, West Conshohocken, PA 19428-2959, United States.destruction of informaion due to envir
16、onmental effect, or recovery and collection activities. When physical items cannot bepreserved in their found state, document it.4.3Photographic DocumentationCommence photographic documentation as soon as possible after the incident. Document thescene of the incident and the condition of items invol
17、ved. If items involved in the incident are disassembled or subjected todestructive testing, each step of the disassembly or testing shall be documented by contemporaneous photographs or videotaping.The preferable photographic technique provides negatives that can be reproduced and enlarged. The date
18、, time, and location of thephotography or videotaping, and identity of the photographer or videotaper, shall be recorded.4.4Collect information related to events and conditions occurring before, during, or after the incident. Documentaryinformation may be held by any entity associated with the incid
19、ent. Make a broad search to identify documents and, where possible,collect them. Obtain statements as early as feasible from all individuals associated with the incident and the recovery activity.3.2 Physical Evidence:3.2.1 Plan the investigation to protect physical evidence significant to the incid
20、ent. The plan should consider the possibility ofidentity loss, physical loss, or the deterioration or destruction of information due to environmental effects or the recovery andcollection activities. For each item considered to be significant to the incident, document, collect and preserve physical
21、items andtheir information content as soon as possible.3.2.2 Document conditions that prevent or interfere with the preservation of any potential evidence in the state in which it wasfound. This might include hazardous or accessibility conditions, weather conditions, or other existing complications.
22、3.2.3 Assign a unique identifier to each item collected and include this information in a label securely attached to the item oras documentation on the items container and enter the identifying information on a log sheet together with a brief description ofthe item. The evidence documentation should
23、 also clearly include any specific details necessary for preservation of the item, suchas temperature control or special handling instructions.3.3 Photographic Documentation:3.3.1 Commence photographic documentation as soon as possible after the incident. Document the scene of the incident andthe co
24、ndition of items involved.3.3.2 Potential evidence should be photographed in the position where it is first observed by the investigator. If items involvedin the incident are disassembled or subjected to destructive testing, each step of the disassembly or testing shall be documentedby contemporaneo
25、us photographs or videotaping.3.3.3 The photographic technique utilized should be of sufficient resolution to preserve the essential aspects of the appearanceof the evidence being photographed, and should also be capable of producing images that can be reproduced and enlarged. Thedate, time, and loc
26、ation of the photography or videotaping, and the identity of the photographer or videotaper shall be documented.3.4 Validation and AuthenticationEvidence and information gathered by investigators must be admissible in the event oflitigation. Validity and authenticity must be established and the chai
27、n of custody traceable. Validity and authenticity of evidenceis established by documentation that defines the relationship of the evidence to the incident. Such documentation includes, but isnot limited to, the following:4.4.1To support the admissibility of evidence and information, the validity and
28、 authenticity must be established and the chainof custody traceable. Validity and authenticity of evidence is established by documentation that defines the relationship of theevidence to the incident. Parts of this documentation may be located within the records of different agencies; however, it is
29、 theintention of this practice that the history of custody should be capable of being reconstructed to reflect the entire lifetime of theevidence. Such documentation includes, but is not limited to, the following:3.4.1 Initial Collection Information. Document the following:43.4.1.1 Identity of the e
30、vidence and any unique labeling,43.4.1.2 Location where the evidence was found,43.4.1.3 Date and time the evidence was found or obtained, and43.4.1.4 Name and addressaffiliation of the individual who initially removed the evidence from the incident scene.4.4.23.4.2 Subsequent Custody Transfer Inform
31、ation:4.4.2.1Names and addresses of the previous custodian and the new custodian,4.4.2.2Modification, handling, testing, and examination to which an item was subjected, while controlled by the previouscustodian, and4.4.2.3Configuration and condition when transferred to the new custodian.5.Contempora
32、neous documentation of the following (information/documentation may not be available all in the samelocation):3.4.2.1 Name and affiliation of each subsequent custodian along with the date of transfer.3.4.2.2 Modification or repackaging of items by each custodian, and3.4.2.3 Configuration and conditi
33、on when transferred to the new custodian.3.5 It is preferred that evidence and documentation should remain unchanged to the fullest extent possible.3.5.1 If transfer of information or items to a more appropriate storage medium is necessary, this is permitted provided thatinformation loss is minimize
34、d.3.5.2 If an agency or company has a written document or evidence retention policy, that policy should be followed. These typesE1188 112of policies are routinely found when dealing with evidence that is potentially hazardous or present in large volumes.4. Keywords5.1forensic engineers; forensic sci
35、ences4.1 evidence collection; evidence documentation; forensic engineers; forensic sciences; photographic documentation; technicalinvestigatorASTM International takes no position respecting the validity of any patent rights asserted in connection with any item mentionedin this standard. Users of thi
36、s standard are expressly advised that determination of the validity of any such patent rights, and the riskof infringement of such rights, are entirely their own responsibility.This standard is subject to revision at any time by the responsible technical committee and must be reviewed every five yea
37、rs andif not revised, either reapproved or withdrawn. Your comments are invited either for revision of this standard or for additional standardsand should be addressed to ASTM International Headquarters. Your comments will receive careful consideration at a meeting of theresponsible technical commit
38、tee, which you may attend. If you feel that your comments have not received a fair hearing you shouldmake your views known to the ASTM Committee on Standards, at the address shown below.This standard is copyrighted by ASTM International, 100 Barr Harbor Drive, PO Box C700, West Conshohocken, PA 1942
39、8-2959,United States. Individual reprints (single or multiple copies) of this standard may be obtained by contacting ASTM at the aboveaddress or at 610-832-9585 (phone), 610-832-9555 (fax), or serviceastm.org (e-mail); or through the ASTM website(www.astm.org). Permission rights to photocopy the standard may also be secured from the ASTM website (www.astm.org/COPYRIGHT/).E1188 113
