ASIS PCI study materials
ASIS PCI study resources

ASIS PCI key terms

ASIS PCI · Get comfortable with the vocabulary.

Chain of Custody

A documented, unbroken record of who handled a piece of evidence, when, where, and for what purpose, from collection through final disposition.

Related: Evidence Integrity, Evidence Log
Evidence Integrity

The condition of evidence remaining unaltered and unaltered in meaning since collection, protected by proper packaging, sealing, and documented handling.

Related: Chain of Custody, Tamper-Evident Seal
Tamper-Evident Seal

A closure that shows visible damage if opened, applied to evidence containers so any unauthorized access becomes apparent to later examiners.

Related: Evidence Integrity, Chain of Custody
Evidence Log

A running register recording each item collected, its identifier, description, location found, collector, and time of collection.

Related: Chain of Custody, Evidence Tag
Evidence Tag

A label attached to or accompanying an evidence item that carries its unique identifier and links it to the case record.

Related: Evidence Log, Chain of Custody
Best Evidence Rule

The legal principle requiring the original document, recording, or object when its contents are at issue, with copies admitted only under recognized exceptions.

Related: Original Document, Evidence Authenticity
Evidence Authenticity

Proof that an item is what its proponent claims it to be, typically established through witness testimony or distinctive characteristics.

Related: Best Evidence Rule, Chain of Custody
Volatile Evidence

Data or material that degrades or disappears quickly, such as system memory or network state, requiring priority collection and special handling.

Related: Forensic Imaging, Order of Volatility
Order of Volatility

A prioritized sequence for capturing evidence, starting with the most perishable sources and moving to the most persistent.

Related: Volatile Evidence, Forensic Imaging
Forensic Imaging

Creating a bit-for-bit duplicate of a storage device or data set so analysis proceeds on the copy while the original stays preserved.

Related: Hash Value, Volatile Evidence
Hash Value

A fixed-length digital fingerprint computed from data; any change to the data produces a different value, allowing later verification of integrity.

Related: Forensic Imaging, Evidence Integrity
Original Document

The actual physical or electronic record created at the time of the event, as distinguished from later copies or reproductions.

Related: Best Evidence Rule
Case Management

The structured planning, tracking, and coordination of investigative work, resources, deadlines, and documentation across the life of a case.

Related: Case File, Case Disposition
Case File

The consolidated record of a case containing reports, evidence references, correspondence, and decisions, maintained as the authoritative account.

Related: Case Management, Case Notes
Case Notes

Contemporaneous written records of actions taken, observations made, and information received, kept in chronological order and attributed to their author.

Related: Case File, Contemporaneous Notes
Contemporaneous Notes

Notes made at or near the time of an event, valued because they are closer to the facts and less affected by later memory decay.

Related: Case Notes
Case Disposition

The final outcome or resolution of a case, including findings, actions taken, referrals, and the rationale for closing or escalating.

Related: Case Management, Case File
Investigative Plan

A written outline of objectives, scope, hypotheses, resources, timeline, and methods guiding an investigation from opening to conclusion.

Related: Case Management, Scope of Investigation
Scope of Investigation

The defined boundaries of what an inquiry will and will not cover, including subjects, time period, locations, and issues.

Related: Investigative Plan
Conflict of Interest

A situation where an investigator's personal, financial, or other interest could bias judgment or appear to compromise impartiality.

Related: Objectivity, Independence
Objectivity

Basing conclusions on verifiable evidence and sound reasoning rather than personal feelings, assumptions, or desired outcomes.

Related: Conflict of Interest, Bias
Bias

A systematic slant in perception, questioning, or interpretation that can distort collection and analysis of information.

Related: Objectivity, Confirmation Bias
Confirmation Bias

The tendency to seek, notice, and favor information that supports an existing belief while discounting contrary evidence.

Related: Bias, Hypothesis Testing
Investigative Interview

A planned conversation with a person to gather information, conducted without accusation and aimed at obtaining accurate, voluntary accounts.

Related: Cognitive Interview, Interrogation
Cognitive Interview

A structured interviewing method that prompts witnesses to reconstruct context, recall in varied orders, and report from multiple perspectives to improve memory retrieval.

Related: Investigative Interview, Eyewitness Identification
Interrogation

Questioning of a suspect focused on obtaining admissions, conducted under legal constraints and with safeguards against coercion.

Related: Investigative Interview, Voluntariness
Voluntariness

The requirement that statements be given freely, without threats, promises, or coercion that would render them unreliable or inadmissible.

Related: Interrogation, Miranda Warning
Miranda Warning

A set of rights advisements given before custodial questioning by government agents, covering silence, counsel, and appointed representation.

Related: Custody, Voluntariness
Custody

A legal status in which a person is not free to leave, triggering rights advisements before questioning by government agents.

Related: Miranda Warning
Eyewitness Identification

A procedure for having a witness pick a suspect from a lineup or photo array, conducted with fair and unbiased methods.

Related: Cognitive Interview, Show-Up
Show-Up

A one-person identification procedure presented shortly after an incident, inherently suggestive and requiring careful documentation.

Related: Eyewitness Identification
Surveillance

Systematic observation of persons, places, or activities to gather information, conducted lawfully and documented in detail.

Related: Covert Operation, Investigative Plan
Covert Operation

Planned activity conducted without the subject's knowledge to obtain information, requiring authorization and careful records.

Related: Surveillance
Link Analysis

A visual or structured method of mapping relationships among people, organizations, transactions, and events to reveal patterns and associations.

Related: Timeline Analysis, Association Matrix
Association Matrix

A grid showing which entities in a case are connected to which others, used to quantify and compare relationships.

Related: Link Analysis
Timeline Analysis

Arranging events in chronological order to test consistency, identify gaps, and establish sequences of cause and effect.

Related: Link Analysis, Hypothesis Testing
Hypothesis Testing

Formulating competing explanations and evaluating evidence for and against each, rather than seeking to confirm a single theory.

Related: Confirmation Bias, Analysis
Analysis

Reasoning that organizes collected information into findings, weighs its reliability, and draws defensible conclusions.

Related: Hypothesis Testing, Case Presentation
Case Presentation

The structured delivery of findings, evidence, and conclusions to decision-makers, often with visual exhibits and a clear narrative.

Related: Analysis, Report Writing
Report Writing

Producing a clear, factual, well-organized written account of an investigation suitable for readers who were not present.

Related: Case Presentation, Case File
Investigative Principles

Core standards such as legality, objectivity, thoroughness, and documentation that govern how inquiries are conducted.

Related: Objectivity, Due Process
Due Process

The requirement that procedures be fair, lawful, and consistent, protecting the rights of all parties involved.

Related: Investigative Principles, Voluntariness
Relevance

The quality of information that tends to make a fact of consequence more or less probable than it would be without it.

Related: Admissibility, Probative Value
Admissibility

Whether evidence may be considered by a decision-maker, determined by rules on relevance, reliability, and lawful collection.

Related: Relevance, Probative Value
Probative Value

The degree to which a piece of evidence actually supports or undermines a proposition in the case.

Related: Relevance, Admissibility
Need-to-Know

A principle limiting access to case information to those whose duties require it, protecting privacy and investigation integrity.

Related: Confidentiality, Case File
Confidentiality

The duty to protect sensitive information from unauthorized disclosure, maintained through access controls and careful communication.

Related: Need-to-Know
Independence

The freedom of an investigator from direction or influence that could compromise findings, often supported by reporting lines and oversight.

Related: Conflict of Interest, Objectivity