Investigations (10%) Flashcards
Which of the following is not a legitimate purpose of an investigation for employee misconduct.
A) To determine whether company rules have been violated.
B) To ascertain whether company policies have been violated.
C) To catalog information about employees that might be derogatory for future use.
D) To determine of state laws have been violated.
E) to determine if federal laws have been violated.
C) To catalog information about employees that might be derogatory for future use
The investigation’s best approach to questioning relies on the following:
A) Most suspects will lie or circumvent the truth
B) a subject is innocent until proven guilty
C) a key suspect is guilty, and evidence must be found
D) a signed statement in the form of a confession must be obtained.
E) None of the above
B) a subject is innocent until proven guilty
Some facts about drug users that may assist in recognizing problem areas during a drug investigation are set forth as follows. Indicate the one that is erroneous. A) The only common characteristic is that drug abusers use drugs to a point where they feel they can no longer manage with its support. B) the adult abuser of drugs commonly has a history of social maladjustment C) Drug abuse is concentrated in but no confined to “slum areas” of large cities D) Those who can afford to by drugs without resorting to crime are less likely to be arrested for drug violations. E) Chronic abuse of drugs is generally not considered a symptom of mental or emotional illness.
E) Chronic abuse of drugs is generally not considered a symptom of mental or emotional illness.
A craving for a drug is exhibited often by the following: A) Water running from nose or eyes B) Frequent yawning or sneezing C) continual itching of arms and legs D) All of the above E) None of the above
D) All of the above
a narcotic addict is sometimes called: A) A bingo B) A geezer C) A hophead D) A pop E) A bagman
C) A hophead
One whose sexual desires are directed to both men and women is known as a: A) Lesbian B) Bisexual C) Homosexual D) Transvestite E) None of the above
B) Bisexual
When it is necessary to question a witness about sexual deviation, all of the following should be avoided except: A) Using street language B) Giving the impression of being avid to develop the facts C) Leaving the impression that you suspect the subject of being a sex deviate D) Allowing the witness to frame the testimony in his or her own words E) None of the above
D) Allowing the witness to frame the testimony in his or her own words
In conducting gambling investigations, the security officer should: A) Cooperate with local, county, state, or federal law enforcement B) Not use undercover operatives C) Wiretap the employees home phone D) Search the lockers of all suspects E) None of the above
A) Cooperate with local, county, state, or federal law enforcement
Which of the following investigative resources should not normally be used in gambling investigations conducted by a proprietary investigative force? A) Closed circuit TV Cameras B) Undercover operatives C) Telephone surveillance D) Florescent Powder E) Physical surveillance
C) Telephone surveillance
In an investigation concerning the regulations of common carriers in interstate commerce or an investigation of railroad accidents, a good source of information would be?
Interstate Commerce Commission
When investigating a homicide or suicide, the best source of information would probably be?
The county coroner’s office
To obtain information concerning marriage licenses, an investigator would contact the?
The Bureau of Vital Statistics
In conducting a “claim” investigation where the claim is a serious one and where this is cause for doubt in connection with the loss or claim, the type of investigation to be used is?
Personal contact
One of the following is NOT one of the desired characteristics of a statement obtained during a claim investigation: A) It should be written in ink or indelible pencil, or typed B) It must be dated C) It should be in a short paragraphs with two spaces between each paragraph D) It may be signed or unsigned E) It must contain the identification of the person making it.
C) It should be in a short paragraphs with two spaces between each paragraph
A sudden, violent, and noisy eruption, outburst or discharge by a material acted upon with forces, such as fire, shock, or electrical charge, which causes the material, either solid or liquid, to convert into gas and violently expand or burst is the definition of what: A) A flash fire B) An explosion C) A detonation D) All of the above E) None of the above
D) All of the above
A yellow-colored crystalline solid pertains to the following explosive: A) TNT B) Dynamite C) Nitroglycerin D) Nitro starch E) Picric acid
E) Picric acid
Which of the following is NOT a high explosive: A) Nitrocellulose B) Nitroglycerin C) Dynamite D) Nitro starch E) Picric acid
A) Nitrocellulose
Which of the following could be considered a source of information? A) A record B) a custodian of record C) A public official D) All of the above E) None of the above
D) All of the above
One of the following is NOT considered an element of the common-law of arson A) Commercial building B) Maliciousness C) Burning D) Willfulness E) Of another
A) Commercial building
Which of the following is NOT usually applicable to a confession? A) it was voluntary B) It was made subsequent to commission of a wrongful act C) It is often applied to civil transactions D) It gives no inference other than guilt E) it is an admission of guilt
C) It is often applied to civil transactions
Which of the following is NOT a requirement for a successful undercover investigation: A) A qualified investigator B) A plausible cover story C) An effective control scheme D) Developing necessary evidence for prosecution E) A reliable method to discontinue or even suddenly abort the investigation
D) Developing necessary evidence for prosecution
If it is necessary to terminate an undercover investigation, one of the following actions should NOT be done: A) Withdraw the agent safely B) Withdraw the agent immediately C) Salvage as much of the resultant data as possible D) Prepare explanations for those who demand then E) Reveal the agent’s identity
E) Reveal the agent’s identity
The principal item of expense in an investigations budge will be what?
Personnel costs
What is the single most important administrative control in handling an investigation?
Indexing
The frequency of a re-investigation of the “financial lifestyle” inquiry should be how long?
Every 18 months
In conducting interviews during an investigation concerning “financial lifestyle,” the investigator should more appropriately tell the person being interviewed that the employee is: A) Being considered for a position B) Suspected of wrongdoing C) Being interviewed for in connection with a position of trust D) Being considered for a promotion E) None of the above: Tell the interviewee nothing
C) Being interviewed for in connection with a position of trust
One of the following is not prohibited by the Federal Civil Rights Act during an investigation: A) Asking questions about prior arrests B) Asking questions about prior convictions C) Directing inquire into areas of race or color for discriminatory purposes D) Directing inquiry into areas of religion or sex for discriminatory purposes E) None of the above
B) Asking questions about prior convictions
Age discrimination in the Employment Act of 1967 bans discrimination against workers or applicants who are between what ages?
At least 40 but less than 65
Questions on an application left blank or field investigative inquires that deal with a union membership or affiliation should be avoided as they may lead to charges that constitute violations of what act?
The National Labor Relations Act
As a general rule, the number of consecutive years of employment or non employment to be verified preceding the date of the investigation is?
7 years
Any investigation containing unfavorable information should be retained in file for a period of no less than how many years?
3 Years
a question on an application from inquiring about prior arrests is illegal as it is a violation of what act?
The Civil Rights Act
The rule that states approximately 1 in 10 applications will have major omissions, which require going back to the applicant, is called? A) The Rule of Ten B) The Rule of Nine C) The 1-10 Rule D) The Verification Rule E0 Sullivan’s Rule
A) The Rule of Ten
Who should be interviewed last or near the end of an investigation under usual circumstances.
Those likely to be hostile
If the interviewee during an investigation is hostile, it is preferable to conduct the interview where?
At the security office
Which of the following characterizations regarding investigative surveillance is NOT true: A) It is expensive B) It is time consuming C) It is often nonproductive D) It is illegal in most jurisdictions E) IT can be fixed or mobile
D) It is illegal in most jurisdictions
The process whereby communications are intercepted or recorded is known as what?
Technical Surveillance
Situations in which at least one party to a communication is aware and willing that the recording of his or her conversation with another person or persons is being made are: A) A violation of the Omnibus Crime Control Act B) A violation of the Federal Communications Act C) Not a violation D) Allowed by the Federal Anti-Racketeering Statute E) Allowed by 18 USC 2511
C) Not a violation
The specific emplacement of an agent or operative in an environment or situation in which the agent’s true role is unknown with the purpose of developing information to be used later in a criminal investigation is know as what?
Undercover investigation
It is becoming increasingly more difficult to do a good preemployeement background investigation because of: A) The expense B) The lack of skilled investigators C) Various rulings and court decisions that inhibit the use of techniques or instruments available D) The uncooperative attitudes of persons interviewed E) Such investigations being illegal in a number of states
C) Various rulings and court decisions that inhibit the use of techniques or instruments available
Which of the following is an advantage of having investigations conducted by in house security staff? A) It is cheaper as a general rule, depending on the number of checks being done B) In-house staff is better trained C) In-house staff has a better grasps as the objective of the investigation D) In-house staff has better sources of information E) None of the above
C) In-house staff has a better grasps as the objective of the investigation
The most widely recognized and best-known instrument designed to detect deception is known as what?
Polygraph
The most important factor in the use of a polygraph is?
The examiner
Which of the following is NOT a good procedure with regard to the use of the polygraph by investigators? A) Pointing out its effectiveness B) Describing it as infallible C) Withholding detailed information from the examinee D) Telling the examinee how experienced the examiner is E) Working with the examiner as a team member
B) Describing it as infallible
The US Army trains its polygraph operators as well as those from other US agencies at what location
Fort Gordon, Georgia
A device that is used to detect deception through stress recorded by voice modulations is know as what?
Psychological Stress Analyzer
Which of following characteristics relate to the psychological stress analyzer. A) No physical connection with the body is required B) The subject is not required to answer in a terse yes-or-no format C) It can be used covertly D) All of the above E) Non of the above
D) All of the above
The effectiveness of the voice analyzer in accurately detecting deception is? A) 100% B) 96% C) 94% D) 85% E) Not determined
E) Not determined
Identify the act that basically prohibits discrimination, discharge, failure or refusal to hire, etc. on any of the grounds of race, color, religion, sec, or national origin: A) The Fair Credit Reporting Act B) The Civil Rights Act of 1964 C) The First Amendment D) The omnibus Crime Control Act E) None of the above
B) The Civil Rights Act of 1964
Under court interpretations of the Civil Rights Act of 1964, which of the following are NOT allowed during investigations: A) Questions regarding prior arrests B) Questions regarding convictions C) Questions regarding age D) Questions regarding residence E) Questions regarding prior employment
A) Questions regarding prior arrests
Interviews should be conducted: A) In the company of the suspect’s attorney B) In an area where distractions are minimal C) In a comfortable room that is well furnished, like a home D) In an area where the light is focused on the suspects face E) None of the above
B) In an area where distractions are minimal
The witness’s idea of the suspect, described in words, is called what?
Portrait parle
The most important qualification of a good undercover operative is what?
Resourcefulness
The main function of the private security agent is to: A) Locate stolen goods B) Ascertain and report illegal activities C) Receive well-rounded investigative experience D) Ascertain the state of moral E) None of the above
B) Ascertain and report illegal activities
The person best suited for physical surveillance work is one who: A) Is tall enough to see over crowds B) Will blend into the area C) Has a college education D) Has a police background E) None of the above
B) Will blend into the area
In conducting a polygraph, it is important to note the most important measure of stress recorded by: A) Breathing B) Galvanic skin response C) Heartbeats D) Perspiration E) None of the above
C) Heartbeats
The pretesting interview prior to the polygraph examinations itself is used for the purpose of: A) Helping the subject relax B) Helping the examiner to get to know the subject C) Helping the examiner to judge the subjects character D) All of the above E) None of the above
D) All of the above
On average, a polygraph examination takes how long?
1 hour
Which of the following statements is NOT correct regarding the polygraph: A) The polygraph is not a lie detector B) the polygraph does not automatically register truth or falsehood C) A polygraph test is conclusive D) Historically, polygraphs have more often been used to establish innocence rather than to prove guilt E) None of the above
C) A polygraph test is conclusive
Person are protected from abuse of polygraphs by: A) The courts through civil lawsuits B) State labor departments C) The National Labor Relations Board D) All of the above E) None of the above
D) All of the above
The best way to verify an applicant’s statement is: A) By judicious use of telephone B) By personal visit with the applicant C) By mail D) All of the above E) None of the above
E) None of the above
Which of the following should NOT be included in a written investigative report of an applicant: A) Derogatory information B) Confidential sources of information C) Results of a lie detector examination D) Arrest records E) None of the above
B) Confidential sources of information
Of all those with mental disorders, the most dangerous subject to handle is: A) One suffering hysteria B) A paranoid psychotic C) A neurotic D) One suffering phobia E) Schizophrenic
B) A paranoid psychotic
Mental disorders may be determined by symptoms. Which of the following is such a symptom: A) Sudden changes in behavior B) Behavior that is not harmonious with a situation C) Unduly prolonged depression D) All of the above E) None of the above
D) All of the above
In handling a mentally disturbed person, one should: A) Take a strong position as the boss B) Assume a calm friendly position C) Leave the impression he or she has control of the situation D) All of the above E) None of the above
B) Assume a calm friendly position
Which of the following is true in handling persons with mental disorders? A) Don’t deceive them B) Don’t become involved in their personal problems C) Where physical restrain is required, use two officers D) All of the above E) None of the above
D) All of the above
There are several stages in an investigative process. Which of the following is not considered a stage? A) Whether to investigate B) Legal evaluation C) Gathering information D) Managerial decision making
B) Legal evaluation
Which of the following is NOT a requirement for a successful undercover investigation: A) A qualified investigator B) A plausible cover story C) An effective control scheme D) A reliable method to discontinue or even suddenly abort the investigation E) Developing necessary evidence for prosecution
E) Developing necessary evidence for persecution
The principal item of expense in an investigations budget will be what?
Personnel Cost
The single most important administrative control in handling investigations is what?
Indexing
As a general rule, the number of consecutive years of employment and non-employment that should be verified is what?
7 Years
Any investigation containing unfavorable information should be retained in a file for a period not less than how many years”
3 Years
The rule that states approximate 1 in 10 applications will have major omissions, which will require going back to the applicant is called what?
The rule of ten
Who should be interviewed last or near the end of an investigation under usual circumstances?
Those likely to be hostile
If an interviewee during investigations is hostile, where should the interview take place?
At the security office
Which of the following characterization regarding investigative surveillance is not true? A) It is expensive B) It is time consuming C) It is often nonproductive D) It is illegal in most jurisdictions
D) It is illegal in most jurisdictions
The process whereby communications are intercepted or recorded is known as what?
Technical surveillance
It is becoming increasingly more difficult to do a good preemployement background investigation because of what?
Various laws and court decisions that inhibit the use of techniques and/or instruments available
An undercover operator should what type of person
Unknown by anyone likely to be in the target population
One of the objectives of an undercover investigation is not to: A) Establish a method of diversion of goods B) Ascertain the level of organized labor activity in the work force C) Provide information on personnel action D) Obtain evidence of past or future crime
B) Ascertain the level of organized labor activity in the work force
In an incident investigation, the general rule is to first interview person who: A) Are not likely to be available for later interview B) Are likely to be hostile C) Have the most extensive information about the incident D) Are familiar with some part of the subject matter
A) Are not likely to be available for later interview
Which of the following is not true regarding communications with an undercover agent: A) Normal contact is initiated by the agent B) The contact telephone should be answered with the name of the company C) An alternate contact telephone number should be established D) The telephones should be reserved exclusively for investigations
B) The contact telephone should be answered with the name of the company
The basic rules of collecting, preserving and maintaining evidence: A) Must be done by many untrained people B) Must be done in a quick manner C) Must follow the chain of custody to be used in court D) Must not be documented properly E) None of the above
C) Must follow the chain of custody to be used in court
Which of the following is NOT a kind of evidence: A) Physical evidence B) Scientific evidence C) Circumstantial evidence D) Testimonial evidence E) All of the above
E) All of the above
Hearsay evidence is what kind of evidence?
Information revealed to the witness by another person
A pen register is: A) A devices that records all numbers dialed on a telephone B) Used to keep track of these entering an event C) Signatures of those registering for an event D) A surveillance technique using a pen camera E) None of the above
A) A devices that records all numbers dialed on a telephone
Which of the following are types of surveillance that can be used in an investigation: A) Fixed surveillance B) Proprietary surveillance C) Moving surveillance D) Relaxed surveillance E) Answers a and c
E) Answers a and c
What are some common ways applicants falsify applications? A) Incomplete applications B) Willful omission of facts or job references C) Misrepresentation of job history or education D) References are non existent E) All of the above
E) All of the above
Which act prohibits discrimination in hiring, firing, promoting, or giving raises or others benefits because of an employees race religion, sex, or national origin? A) Fair Credit Reporting Act B) Age Discriminating is Employment Act - 1967 C) Civil Rights Act - 1964 D) Americans with Disabilities Act (ADA) E) National Labor Relations Act (NLRA)
C) Civil Rights Act - 1964
An explosion is defined as: A) An item that can cause fire damage B) A sudden, violent, and noisy eruption, outburst or discharge by a material acted upon with forces, such as fire, shock, or electrical charge, which causes the material, either solid or liquid, to convert into gas and violently expand or burst C) Any chemical compound, mixture, or device that functions by explosion to release instantaneous gas and heat D) Objects that produce significant sound waves E) Materials that can cause injury to others
B) A sudden, violent, and noisy eruption, outburst or discharge by a material acted upon with forces, such as fire, shock, or electrical charge, which causes the material, either solid or liquid, to convert into gas and violently expand or burst
Which of the following are exceptions to the Omnibus Crime Control and Safe Street Act of 1968 (Title III): A) Wiretapping takes place in a one-party consent state B) The wiretap is obtained with a court order called an ex parte order C) It is necessary for emergency cases involving national security D) Answers a and b E) All of the above
D) Answers a and b
Embezzlement is defined as?
The misappropriation of money and wrongful conversion of merchandise.
Bombs are defined as?
Any chemical compound, mixture, or device that functions by explosion to release instantaneous gas or heat.
What are the five qualities of and effective investigation?
The investigations must be objective, through, relevant, accurate, and current.
What are the three “I’s” of an investigator?
Information, interrogation, and instrumentation
What is an Investigation?
A systematic & thorough examination or inquiry into something or someone (the collection of facts & information) and the recording of that examination in a report)
What is a fact-finding process, ideally separated from the decision-making process?
Workplace Investigation
Facts of an effective workplace investigation
- Must be fair & impartial
- Must be factual & objective
- Must be thorough
- Must be well documented
- Must protect the rights of suspected violators & witnesses
- Must not violate the law, company policy, labor agreements, or anyone’s right to privacy
- Must be confidential - evidence findings, notes, reports & conclusions should only be shared with those who need to know
- Should always involve upper-management & HR
Primary Purposes of any Investigation
- Documenting incidents
- Identifying the cause of undesirable situations
- Documenting & correlating facts
- Identifying suspects
- Compiling information to prove/disprove allegations or implicate/exonerate suspects
- To make a decision about suitability
What is a lack of solid, ethical standards that can seriously damage the effectiveness of an investigative unit & can leave the organization open to civil or criminal liability?
Ethics
Two Key Decisions for Outsourcing and Investigation
- Size of the preferred vendor
- Whether services will be bundled
5 Attributes of an effective & reliable investigation
- Objectivity
- Thoroughness
- Relevance
- Accuracy
- Timeliness
5 Principle resources of an investigation unit
- People
- Information
- Credibility
- Physical assets
- Financial assets
4 Phases of the investigative life cycle
- Initiation of the investigation & its source
- The investigation itself
- Reporting
- use of the information (includes adjudication)
3 Tools of an investigator (“the 3 I’s”)
- Information
- Instrumentation
- Interrogation (principal tool)
3 Definition or foundation documents for the unit
- Functional charter (usually produced in the suite)
- Policy statement
- Objectives
When should an employer determine whether the employee conduct is a legitimate subject of discipline & inquiry under state & federal laws?
Prior to conducting an investigation
Principle characteristics of internal theft
- diversion
- conversion
- disguise
- divergence
Incident investigations may also be referred to as…
Complaint Investigations (which is the most common type of investigation in many organizations
An Incident Reporting System does 2 things that could not otherwise be done
- Provides a history of events occurring to the organization
- Provides a basis for professional efforts at asset recapture, recovery or incident reduction or termination
4 Categories of Security Data Analysis
- Claims avoided
- Proofs of loss
- Recovery of physical assets
- Uninsured claims or causes of action
The purpose of an Incident Report is to…
Provide data on which to base security decisions
Benefits of an Incident Reporting System
- Identifies the item targeted for theft
- Determines which counter-measures were effective
- Classifies events that are high-probability / low-criticality to low-probability / high-criticality
- Provide an overview of where security personnel are spending their time
- Plot event trends
- Facilitate protection or recovery of assets and apprehension of thieves
3 Steps to recommended reporting progression
- All employees must notify their immediate supervisor of any incidents or known or suspected asset losses
- First-line supervisors should be responsible for completing reports of losses within their areas of responsibility
- The Security Manager is responsible for reviewing the report
3 Types of Incident Database Reports
- General management distribution reports
- Corrective action reports
- Loss status report
Predictive Modeling
By tracking & analyzing incidents, the security manager can determine countermeasures that may prevent future losses
What is a common mistake of inexperienced investigators
Failing to corroborate evidence
3 Forms of evidence
- Oral
- Documentary
- Physical
Spoken statement regarding person’s knowledge which may be direct or indirect & gained in any manner
Oral Evidence
Information usually in the form of documents or writing impressions
Documentary Evidence
Evidence that is tangible
Physical
Evidence that is first-hand knowledge
Direct Evidence
Evidence that is highly informed inference (aka: circumstance evidence or hearsay evidence)
Indirect Evidence
The rule that applies most often in determining the importance of evidence & its ability to prove a point
Materiality
In the majority of inquiries who the most available and valuable sources of information?
The persons involved
What evidence in its natural state, cannot be seen what is contained in the physical object that holds our evidence; equipment & software are required to make the evidence visible (i.e. fingerprints, electronic evidence)?
Latent Evidence
Categories of Physical Evidence
- Corpus Delicti
- Associative
- Identifying
Evidence that proves a crime has been committed
Corpus Delicti
Circumstantial evidence; links a suspect with the scene of the crime
Associative
Associative evidence that establishes the identity of suspect & found at the scene
Identifying
When does success in the use of evidence increase?
When an incident scene search is planned, coordinated, and executed by knowledgeable security employees
* A search may be either a cautious search of visible areas (avoiding evidence loss or contamination or a vigorous search of concealed areas)
2 Main tasks that the on-site team should perform
- Secure & protect the scene
- Take control of the scene immediately
In evidence searches what do you focus on first?
Evidence that could be lost
What OSHA standard says to utilize universal precautions that require all blood, body fluids or other potentially infectious materials to be treated as if infected with blood-borne diseases?
Blood-born pathogens standard
What are 3 things all explosive materials sensitive to?
heat, shock, friction
What can result from direct or indirect exposure to laser beams
Irreversible eye damage
* Prolonged exposure to the skin should also be avoided
What present hazards including toxic gases, explosive or oxygen-deficient atmospheres electrical dangers, or materials that can engulf personnel entering the space
Confined Spaces
PPE - what provides protection from acids, alkaline solutions, hydraulic fluid, photographic solutions, fuels, lubricants, aromatics, petroleum and chlorinated solvents.?
Nitrile
What offers resistance to oil, grease, acids, solvents, alkalies, bases & most refrigerants?
Neoprene
What is resistant to alkalies, oils & limited concentrations of nitric & chromic acids?
Polyvinyl Chloride (PVC)
What resists mild acids, caustic detergents, germicides & electronic solutions
Latex (natural rubber)
What material swells & degrades if exposed to gasoline or kerosene?
Latex
What is a running description of the incident scene?
The Narrative
What type of approach should be used in the narrative
Systematic
What should be used to supplement, not substitute, for the narrative?
Photographs & Sketches
What can be caused by an incorrect point of view, improper perspective & deceptive tones like shadows?
Distortion
What parts of the incident scene should be photographed first
The most fragile areas
In what positions (twice - first) should the important pieces of the evidence be photographed?
A medium distance view that shows the evidence & its position to other evidence A close view that includes a scale and fills the frame
Before releasing the incident scene ensure that the evidence is:
- Collected according to legal requirements
- Documented
- Marked for identification
Who is the only person to release the scene?
The person in charge
What is the most critical point of the incident scene investigation and is the time when errors occur?
Collection of physical evidence
What is the most common type of physical evidence?
Fingerprints
How many people should observe the evidence in place during recovery & being marked
Two
Where to mark evidence
Directly on the evidence when necessary
* The best way to certify a piece of evidence is with investigators initials
What establishes the actual chain of custody
Proper marking of evidence at the time of seizure & transfer
Adhesives - If possible submit the item to which the adhesive, caulk or sealant has adhered
If not possible remove a sample of the material with a clean sharp instrument & transfer it to a resealable plastic bag or leak-proof container, such as a film canister or plastic pill bottle
Steps for proper anthropology
- Clean & air-dry bones if possible
- Pack in paper bags & wrap in protective material, such as bubble wrap or paper
- If the tissue is present in the skeletal material, refrigerate until mailing & then ship in a foam cooler
- Collect insect samples found on the remains in leak-proof containers such as film canisters or plastic pill bottle
- Call the laboratory for additional instructions or contact an entomologist
Handling Blood Evidence
- Collect at least two 5ml tubes of blood in purple-top tubes, w/ EDTA as an anticoagulant for DNA analysis
- Collect samples for drug-or-alcohol testing in gray-top tubes
- Refrigerate (do not freeze) blood samples - use cold packs, not dry ice, during shipping
How to dry bloodstained garments
Air-dry
Bloodstains
- Do not place wet or dried garments in plastic or airtight containers
- Pack in a clean paper - do not use plastic containers
- Air-dry the cloth or swab & pack in clean paper or an envelope with sealed corners - do not use plastic containers
Oral Swabs (Buccal)
Air-dry the swabs & place in a clean paper or an envelope with sealed corners - do no use plastic containers
Building Materials
- Package each item of evidence in a separate paper bag - do not process tools for latent prints
- Submit known a questioned debris in leak-proof containers such as film canisters or plastic pill bottles - do not use paper or glass containers
Chemicals
- Collect an unstained control sample, package separately, & submit it with the stained evidence
- When cutting is not possible, transfer questioned stains by rubbing with a clean cotton swab
- Air-dry the swab & pack in a heat - sealed or resealable plastic bag Submit an unstained swab as a control
Computers
- Use a sturdy cardboard container when shipping computer components; if possible, use the original packing case with the fitted padding
- Use large, plastic bubble wrap or foam rubber pads as packing
- Do not use loose foam pieces because they lodge inside computers & components & create static charges that can cause data loss or damage to circuit boards
- Pack & ship central processing units in the upright position: label the outside container “this end up”
Controlled Substances
Submit evidence in separate, heat-sealed or resealed plastic bags
Lubricants
- Air-dry the evidence & package separately in paper bags
- Air-dry the swab & pack it in a heat-sealed or resealable plastic bag
- Package lubricants separately in leak-proof containers
Two sources of DNA are used in the Forensic analysis
- Nuclear DNA (nDNA) is typically analyzed in evidence containing blood, semen, saliva, body tissue and hairs with tissue at the roots
- Mitochondrial DNA (mtDNA) is typically analyzed in evidence containing naturally shed hairs, hair fragments, bones & teeth
Dyes
Do not submit largely stained evidence (e.g. car seats) when possible, cut a small sample of the stained area & submit in a heat-sealed or resealable plastic bag
Feathers
Submit feathers in heat-sealed or resealable plastic bags or paper bags
Fibers
Submit fibers in clean paper or an envelope with sealed corners
Glass
- Submit samples of glass from each broken window or source in leak-proof containers such as film canisters or plastic pill bottle (do not use paper or glass containers)
- Submit particles in leak-proof containers such as film canisters or plastic pill bottles - do not use paper or glass containers
- Submit vacuum sweepings in leak-proof containers - do no use paper or glass containers
Glass - Fractures
- Pack all glass separately & securely to avoid shifting & breaking during shipping
- Secure the glass between some plywood or sturdy cardboard - do not place any objects into the impact area
Guns & Gun Parts
- Firearms must be minimally handled to avoid loss or destruction of evidence
- Objects must not be allowed to enter or contact the firearms barrel, chamber, or other operating surfaces
- Use fingers to pick up a handgun by its knurl grips - Never stick anything down the barrel of the weapon
- Do not mark the item - firearm pieces must be identified with a tag containing the caliber, make, model and serial number
Hair
- Collect at least 25 known hairs from different parts of the head or pubic regions - comb & pull out the hairs
- Submit hairs in clean paper or an envelope with sealed corners
- Packages each group of hair separately in clean paper or an envelope with sealed corners - do not use plastic containers
- Refrigerate & submit as soon as possible to the selected laboratory
Images
- Never use the pause operation when viewing original videotapes
- Process all film including bank surveillance film, prior to submitting
- Do not mark or cut items submitted for comparisons where they are visible in the questioned images
- Submit items such as clothing & firearms for other examinations before submitting them for image comparison
Ink
Pack ink evidence separately from any document or surface with ink marks
Latent Fingerprints
The laboratory is the best place to develop latent prints However, it is sometimes necessary to develop latent prints at incident scenes
Paint
- Collect control paint chips - controls must be taken from an area close to but not in any damaged area
- Package paint specimens in leak-proof containers, such as vials or pillboxes
- Do not stick paint particles on adhesive tape
- Do not use plastic bags, cotton or envelopes to package paint specimens
Pepper Spray or Foam
- Air-dry the evidence & package separately in paper bags
- Moisten a clean cotton cloth or swab with isopropanol (rubbing alcohol) & wipe over the sprays or foams
- Prepare a second, moistened cloth or swab as a control
- Air-dry the cloths or swabs & pack separately in heat-sealed or resealable plastic bags
- Submit spray canisters when possible
Polymers
- Submit fragments in leak-proof containers, such as film canisters or plastic pill bottles - do not use cotton or paper containers
- Remove damaged motor-vehicle parts & package separately in resealable plastic bags or boxes
- If possible submit entire items with potential or smeared polymeric transfers
- Package separately in paper bags - pack to prevent stain removal by abrasive action during shipping
- Pack in clean paper - do not use plastic containers
Product Tampering
- Package & ship samples separately to avoid contamination
- submit samples in leak-proof containers, such as film canisters or plastic pill bottles - do not use paper or glass
Ropes & Cords
- Submit the entire rope or cord, if the rope or cord must be cut, specify which end was cut during evidence collection
- Submit in heat-sealed or resealable plastic or paper bags
Saliva & Urine
- Pack in clean paper or an envelope with sealed corners
- When possible, cut a large sample of saliva or urine stains from immovable objects with a clean sharp instrument
- Pick up cigarette butts with gloved hands or clean forceps - do not submit ashes Air-dry & place the cigarette butts from the same location in clean paper or an envelope with sealed corners
- Pick up chewing gum with gloved hands or clean forceps, air-dry and place in clean paper or envelope with sealed corners
Semen & Semen Stains
- Submit small, dry semen-stained objects to the selected laboratory
- Absorb dried semen stains on immovable objects onto a clean cotton cloth or swab moistened with distilled water
- Air-dry the swab or cloth & place in clean paper or an envelope with sealed corners
- These samples should not be packed in plastic containers
Photographing Shoeprint & Tire Tread Impressions
General incident scene photographs must be taken to relate the impressions to the incident scene
Shoeprint & Tire-tread Impressions
- Allow the cast to air-dry for at least 48 hrs
- Package the cast in paper, not plastic
- Air-dry & package evidence separately in bubble wrap, clean/smooth paper, laminated folders or paper bags
Soil
- Air-dry the soil & the clothing & package separately in paper bags
- Air-dry the soil & package separately in paper bags
- Submit known & questioned soil in leak-proof containers - do not use paper envelopes or glass containers
Tape
- Whenever possible submit tape still adhered to the substrate minimizing the loss of trace evidence, latent fingerprints or contact impressions
- Do not distort or tear the tape during removal
- If the tape is cut during removal document and initial each cut
Tissues Bones Teeth
- Place tissues samples in a clean, airtight plastic container without formalin or formaldehyde
- Place teeth & bone samples in clean paper or an envelope with sealed corners
- Freeze the evidence place in foam containers, and ship overnight on dry ice
Tool Marks
- Submit samples in leak-proof containers, such as film canisters or plastic pill bottles
- To avoid contamination, do not place the tool against the foot-marked evidence
- Submit the tool rather than making test cuts or impressions
Toxicology
- Because of a large number of potentially toxic substances, it may be necessary to screen for classes of poisons, such as:
- Volatile compounds (ethanol, methanol, isopropanol)
- Heavy metal (arsenic)
- Non-volatile organic compounds (drugs of abuse, pharmaceuticals)
- Miscellaneous substances (strychnine, cyanide)
Toxicology
- The quantity of biological specimens submitted depends on
- Whether identity of a toxic substance is known The route of administration
- Time after exposure that biological specimens are collected
- Whether the persons involved are living or dead
Toxicology
- Place each biological specimen in a separate, labeled, sealed glass tube, plastic cup, or heat-sealed or resealable plastic bag
- Biological specimens must be refrigerated or frozen during shipping
Chain of Custody
The uninterrupted control of evidence, critical to the admission of evidence in court
Written Evidence
Traits such as age, sex, personality, and intent cannot be determined by handwriting
Written Evidence - Types of False Signatures
- Traced signatures are prepared by using a genuine signature as a template or pattern
- Simulated signatures are prepared by copying or drawing a genuine signature
- Freehand signatures as written in the forger’s normal handwriting with no attempt to copy another person’s writing style
Documentary Evidence
Burned or charred paper with information on it can sometimes be deciphered - it must be minimally handled and shipped in the container in which it was burned in polyester film encapsulation or between layers of cotton in a rigid container
Res Gestae
- Things done is an exception to the rule against hearsay evidence based on the belief that because certain statements made naturally, spontaneously, and without deliberation during the course of an event, they leave little room for misunderstanding or misinterpretation by another person
Res Gestae
The courts believe such statements carry a high degree of credibility
Types of evidence that can be admitted as res gestate fall into three categories
- Words or phrases that form part of, or explain, a physical act
- Exclamations that are so spontaneous as to belie concoction
- Statements that are evidence as to someone’s state of mind
The Daubert decision (1993) and Federal Rules of Evidence (Rule 702) identify five considerations
- Whether the technique or theory can be or has been tested
- Whether the technique or theory has been subject to peer review and publication
- The known or potential rate of error of the technique or theory
- The existence and maintenance of standards and controls
- The degree to which the technique or theory has been generally accepted within the scientific community
Public vs. Private Sector Investigations Scope
Corporate investigations tend to be broader in scope than those initiated by public law enforcement
Private sector security value is frequently measured in
- Recovery
- Restitution
- Risk reduction
Burdens of Proof
- Public sector (criminal court): Proof beyond a reasonable doubt
- Private sector (civil court): Preponderance of the evidence
Differences in multi-national and international investigations fall into one or more of three categories
- Laws
- Liaison
- Approach
Differences in multi-national and international investigations fall into one or more of three categories
- Laws
- Liaison
- Approach
What originated in the securities industry (Securities Act of 1933)
Due Diligence
Due diligence
Always based on the “reasonably prudent person” rule
Due diligence
Diligence emphasizes the positive aspect of due care, while negligence describes the failure to exercise due care