Chain of custody is vitally important ...
Pick your strongest chain
A New Zealand example which occurred this week is included:
@rsladeRemove the human factor, an excellent starting place for Augmented Intelligence, Audit, and removal of emotions; and human error.
I'm afraid absolutely none of those suggestions can help with a chain of custody requirement, which is what Rob's post refers to.
Chain of custody is a legal requirement to ensure objects or information with potential use as evidence in court have been verified as protected from tampering while in the custody of legal authorities. There will always be a human factor in maintaining a verifiable record of custodian and storage. The issue of chain of custody is even tricker when applied to data systems, because the requirement must apply to both the physical hardware and to the data at issue. It is for this reason that forensic analysis of data starts with creating an exact mirror of the data on the system of interest, and all forensic analysis software is applied to that mirror, not to the original source system; the very act of applying forensic analysis software to the data would be a form of tampering in the eyes of the court, making the original evidence potentially invalid for use in a hearing or trial.
Your further comments appear to address broader aspects of cybersecurity planning beyond the specific legal requirements of the original post. You make the key point that support may continued promotion fo using a systems engineering approach to security, always considering all parts of the complete system, including people, process, and tools. We can never fully eliminate the human factor. However, by always recognizing it, we can sometimes use tools (computer systems) and processes (such as AI) to overcome weaknesses introduced by having people as part of a the system. Maybe we should branch off to the broader planning topic in a new thread?
SHould we branch this topic to a
(After that experience, I got *very* careful about doing the damage reports, and
definitely keep all of them for some time after ...)
When taking and returning the vehicle, I have gotten in the habit of additionally taking about a dozen pictures on my phone, which time/location stamps and uploads to the cloud. And, I generally try to include "their" employee in at least one of pic.
Kinda annoys the employees, probably because I am slowing the line, but I figure that pictures are more convincing to a judge than a few scribbles on a line drawing of a car.
P.S. I also did the same thing on the only lease I ever turned in.