Option A. A robust Chain of Custody is the best answer because the issue in the question is proving that evidence remained untampered with from seizure through courtroom presentation . CHFI v11 directly identifies chain of custody as a core requirement under rules and regulations for search, seizure, evidence preservation, and examination. It also emphasizes best practices for handling digital evidence , preserving evidence , and legal requirements tied to admissibility.
The purpose of chain of custody is to document who collected the evidence, when it was collected, how it was stored, who accessed it, and how it moved throughout the investigation . This creates a defensible record showing continuity, integrity, and accountability. In court, that record is critical to demonstrating that the evidence presented is the same evidence originally seized.
The other options are not the central answer. ACPO principles are important guiding principles, but the specific mechanism used to prove handling history is the chain of custody record itself. Sanitizing target media relates to acquisition preparation, not courtroom continuity. Seeking consent may matter legally in some cases, but it does not prove evidence integrity over time. Therefore, chain of custody is the key component.