1、Designation: E1188 11 (Reapproved 2017)Standard Practice forCollection and Preservation of Information and PhysicalItems by a Technical Investigator1This standard is issued under the fixed designation E1188; the number immediately following the designation indicates the year oforiginal adoption or,
2、in the case of revision, the year of last revision. A number in parentheses indicates the year of last reapproval. Asuperscript epsilon () indicates an editorial change since the last revision or reapproval.1. Scope1.1 This practice covers guidelines for the collection andpreservation of information
3、 and physical items by any techni-cal investigator pertaining to an incident that can be reasonablyexpected to be the subject of litigation.1.2 This practice recommends generally accepted profes-sional principles and operations, although the facts and issuesof each situation require consideration, a
4、nd frequently involvematters not expressly dealt with herein. Deviations from thispractice should be based on specific articulable circumstances.1.3 This practice offers a set of instructions for performingone or more specific operations. This standard cannot replaceknowledge, skill or ability acqui
5、red through appropriateeducation, training, and experience and should be used inconjunction with sound professional judgment.1.4 This standard does not purport to address all of thesafety concerns, if any, associated with its use. It is theresponsibility of the user of this standard to establish app
6、ro-priate safety and health practices and determine the applica-bility of regulatory limitations prior to use.1.5 This international standard was developed in accor-dance with internationally recognized principles on standard-ization established in the Decision on Principles for theDevelopment of In
7、ternational Standards, Guides and Recom-mendations issued by the World Trade Organization TechnicalBarriers to Trade (TBT) Committee.2. Significance and Use2.1 This practice is intended for use by any technicalinvestigator when investigating an incident that can be reason-ably expected to be the sub
8、ject of litigation. The intent is toobtain sufficient information and physical items to discoverevidence associated with the incident and to preserve it foranalysis.2.2 The quality of evidence may change with time,therefore, special effort should be taken to capture and preserveevidence in an expedi
9、tious manner. This practice sets forthguidelines for the collection and preservation of evidence forfurther analysis.2.3 Evidence that has been collected and preserved shall beidentified with, and be traceable to, the incident. This practicesets forth guidelines for such procedures.3. Procedure3.1 D
10、ocumentary InformationCollect information relatedto events and conditions occurring before, during, or after theincident. Documentary information may be held by any entityassociated with the incident. Make a broad search to identifydocuments and, where possible, collect them. Obtain state-ments as e
11、arly as feasible from all individuals associated withthe incident and the recovery activity.3.2 Physical Evidence:3.2.1 Plan the investigation to protect physical evidencesignificant to the incident. The plan should consider thepossibility of identity loss, physical loss, or the deterioration ordest
12、ruction of information due to environmental effects or therecovery and collection activities. For each item considered tobe significant to the incident, document, collect and preservephysical items and their information content as soon aspossible.3.2.2 Document conditions that prevent or interfere w
13、ith thepreservation of any potential evidence in the state in which itwas found. This might include hazardous or accessibilityconditions, weather conditions, or other existing complica-tions.3.2.3 Assign a unique identifier to each item collected andinclude this information in a label securely attac
14、hed to the itemor as documentation on the items container and enter theidentifying information on a log sheet together with a briefdescription of the item. The evidence documentation shouldalso clearly include any specific details necessary for preser-vation of the item, such as temperature control
15、or specialhandling instructions.1This practice is under the jurisdiction of ASTM Committee E30 on ForensicSciences and is the direct responsibility of Subcommittee E30.11 on Interdisciplin-ary Forensic Science Standards.Current edition approved March 15, 2017. Published March 2017. Originallyapprove
16、d in 1987. Last previous edition approved in 2011 as E1188 11. DOI:10.1520/E1188-11R17.Copyright ASTM International, 100 Barr Harbor Drive, PO Box C700, West Conshohocken, PA 19428-2959. United StatesThis international standard was developed in accordance with internationally recognized principles o
17、n standardization established in the Decision on Principles for theDevelopment of International Standards, Guides and Recommendations issued by the World Trade Organization Technical Barriers to Trade (TBT) Committee.13.3 Photographic Documentation:3.3.1 Commence photographic documentation as soon a
18、spossible after the incident. Document the scene of the incidentand the condition of items involved.3.3.2 Potential evidence should be photographed in theposition where it is first observed by the investigator. If itemsinvolved in the incident are disassembled or subjected todestructive testing, eac
19、h step of the disassembly or testing shallbe documented by contemporaneous photographs or videotap-ing.3.3.3 The photographic technique utilized should be ofsufficient resolution to preserve the essential aspects of theappearance of the evidence being photographed, and shouldalso be capable of produ
20、cing images that can be reproducedand enlarged. The date, time, and location of the photographyor videotaping, and the identity of the photographer or video-taper shall be documented.3.4 Validation and AuthenticationTo support the admissi-bility of evidence and information, the validity and authenti
21、citymust be established and the chain of custody traceable. Validityand authenticity of evidence is established by documentationthat defines the relationship of the evidence to the incident.Parts of this documentation may be located within the recordsof different agencies; however, it is the intenti
22、on of thispractice that the history of custody should be capable of beingreconstructed to reflect the entire lifetime of the evidence. Suchdocumentation includes, but is not limited to, the following:3.4.1 Initial Collection InformationDocument the follow-ing:3.4.1.1 Identity of the evidence and any
23、 unique labeling,3.4.1.2 Location where the evidence was found,3.4.1.3 Date and time the evidence was found or obtained,and3.4.1.4 Name and affiliation of the individual who initiallyremoved the evidence from the incident scene.3.4.2 Subsequent Custody Transfer InformationContemporaneous documentati
24、on of the following(information/documentation may not be available all in thesame location):3.4.2.1 Name and affiliation of each subsequent custodianalong with the date of transfer.3.4.2.2 Modification or repackaging of items by eachcustodian, and3.4.2.3 Configuration and condition when transferred
25、to thenew custodian.3.5 It is preferred that evidence and documentation shouldremain unchanged to the fullest extent possible.3.5.1 If transfer of information or items to a more appropri-ate storage medium is necessary, this is permitted provided thatinformation loss is minimized.3.5.2 If an agency
26、or company has a written document orevidence retention policy, that policy should be followed.These types of policies are routinely found when dealing withevidence that is potentially hazardous or present in largevolumes.4. Keywords4.1 evidence collection; evidence documentation; forensicengineers;
27、forensic sciences; photographic documentation;technical investigatorASTM International takes no position respecting the validity of any patent rights asserted in connection with any item mentionedin this standard. Users of this standard are expressly advised that determination of the validity of any
28、 such patent rights, and the riskof infringement of such rights, are entirely their own responsibility.This standard is subject to revision at any time by the responsible technical committee and must be reviewed every five years andif not revised, either reapproved or withdrawn. Your comments are in
29、vited either for revision of this standard or for additional standardsand should be addressed to ASTM International Headquarters. Your comments will receive careful consideration at a meeting of theresponsible technical committee, which you may attend. If you feel that your comments have not receive
30、d a fair hearing you shouldmake your views known to the ASTM Committee on Standards, at the address shown below.This standard is copyrighted by ASTM International, 100 Barr Harbor Drive, PO Box C700, West Conshohocken, PA 19428-2959,United States. Individual reprints (single or multiple copies) of t
31、his standard may be obtained by contacting ASTM at the aboveaddress or at 610-832-9585 (phone), 610-832-9555 (fax), or serviceastm.org (e-mail); or through the ASTM website(www.astm.org). Permission rights to photocopy the standard may also be secured from the Copyright Clearance Center, 222Rosewood Drive, Danvers, MA 01923, Tel: (978) 646-2600; http:/ 11 (2017)2
