Read the text below, analyse it, provide a feedback as well as ask question for discussion.

Hi, forensic has guiding principles that must be followed , it has a strict standard on gathering evidence of a cyber related or device that's part of a crime.

based upon Chapter one , all 6 phases all have equal parts to make sure a crime can be investigated properly but, which one is the most important phase. I would have to lean towards phase 2 - preservation why?, because as soon as the crime is found all evidence will become a key player for a prosecution. So it you preserve the evidence the the rest of the phases can continue on. If the evidence is tampered with. How can you continue on to investigate knowing there is no clean evidence. the 6 phases are

1. identification

2.preservation

3.collection

4.Examination

5.analysis

6.Reporting

, do you see how preservation is close to the top. It showcases how important it is compared to the one below.