If a potential clue is found, what is the proper procedure to preserve evidence?

• A. Move clues to a secure location before documenting.
• B. Photograph clues only; do not map.
• C. Photograph and map clues; note time and location; preserve chain of custody; report to ICS.
• D. Record clues on paper only; do not document photographs.

Answer: (C)

Preserving evidence in the field hinges on documenting both what is found and where it is, while protecting its integrity. The best approach is to photograph and map the clue, record the exact time and location, maintain an unbroken chain of custody, and report it to the Incident Command System. Photographing provides a faithful visual record of appearance and context; mapping preserves spatial relationships that can be critical for later analysis; time and location stamps anchor the clue in the investigation timeline; the chain of custody shows who handled the evidence and when, preventing questions about tampering. Reporting to ICS ensures proper handling and integration into the incident plan. Moving clues before documenting can alter or destroy information; relying on photos alone omits spatial context; recording only on paper misses the visual record. So this combined approach is the correct procedure.