Physical security

Access to the forensic lab needs to be strictly controlled. In order to maintain a chain of custody, only those with a justifiable need should be allowed access to the lab. This limitation is necessary to remove any chance that the evidence can be tampered with or destroyed. The lab therefore should be locked at all times. Ideally, access should be granted via access cards or fobs with a central management system granting access. This allows for a complete reconstruction of all personnel who access the laboratory within a specific time period.

The laboratory should also contain evidence lockers so that evidence can be properly stored while not being examined. Lockers should be secured either through an onboard lock or through the use of a combination lock. The keys to these lockers should be secured within the laboratory and access given to examiners. If the organization has adequate resources, each specific incident should have its own locker with all the evidence contained within a single locker. This reduces the chance of digital evidence becoming comingled.

Climate should be controlled in much the same way as in any data center. Climate and humidity should be set to the appropriate levels.