Certified Chief Information Security Officer (CCISO) — Question 8

The process for identifying, collecting, and producing digital information in support of legal proceedings is called _____________________________.

Answer options

• A. chain of custody
• B. electronic review
• C. evidence tampering
• D. electronic discovery

Correct answer: D

Explanation

The correct answer is 'electronic discovery' because it specifically refers to the process of locating and handling digital evidence for legal use. 'Chain of custody' pertains to the tracking of evidence to ensure its integrity, while 'electronic review' is about analyzing data, and 'evidence tampering' involves altering or manipulating evidence, which is illegal.