What best describes the chain of custody in digital investigations?

• A. A documented, chronological record of evidence handling; example: a log showing who accessed a file, when, and what actions were taken.
• B. A security protocol that encrypts data at rest.
• C. A procedure for disposing of confidential documents.
• D. A policy that prohibits sharing evidence with investigators.

Answer: (A)