Authority and scope
Confirm the legal authority, premises, persons, device categories, accounts and data covered by the order or warrant.
Scene documentation
Photograph device state, connections, screens, serial numbers, surroundings and relevant network equipment.
Live-system decisions
Do not automatically switch off an active computer or mobile device. Encryption and volatile data may be lost. Obtain specialist guidance.
Isolation and packaging
Use appropriate isolation, anti-static packaging and tamper-evident procedures. Keep chargers and relevant peripherals.
Continuity
Assign exhibit identifiers and record every transfer, action, acquisition and storage location.
Important: This is general guidance. Legal authority, privacy, employment law, privilege and evidential requirements should be considered for the specific matter.