How to avoid fraud when removing the HDD?

Question

Information Security

How can falsifications be avoided when removing the HDD? Is it possible to demand that checksums be removed from attesting witnesses and entered into the protocol?
What practice is currently used in the world and the Russian Federation in particular?

Answer 1

As far as I know, there are no special procedures aimed at this. The computer (hard drive, CD, microSD, etc.) is simply sealed, signatures are put on the sealing piece of paper, including witnesses, all this is described in the seizure protocol and in this form it is stored. Further, the expert, dealing with these data, indicates in the inspection report "sealed with such and such a seal, with such and such signatures, ...", etc.
Everything is based on the honesty of an expert and an investigator :) That is, there are no problems to do anything with your HDD and then you will not be able to prove or disprove anything. I have personal experience with this...

Answer 2

if there is an exception to the protocol, you must ask that everyone enter by serial numbers, but there is one caveat when issuing a PC, they first asked to sign, they say there are no complaints, and then they already issued a PC, and there 70% was already rubbish ((

Answer 3

Ironically, this is all nonsense. I'm wondering how the content of the HDD is proven. The police can cram anything in there, then prove that you are not a camel. Of course, if they want, they will sew, there are a lot of ways. But the procedure itself is interesting nonetheless.