List the steps in maintaining chain of custody for digital evidence. 2. why is it important to follow the chain of custody when gathering evidence? 3. for the computer forensics case, identify what evidence the forensics experts were able to gather. 4. name two of the things the united states attorney was able to prove in the computer forensics case. 5. what important questions should the security incident response form answer? 83 copyright © 2014 by jones & bartlett learning, llc, an ascend learning company. all rights reserved. student lab manual 6. why is it important to include a time/date stamp in the security incident response form?