Secondary evidence is a copy of evidence or oral description of its contents; not as reliable as best evidence
Here are other types of evidence: Best evidence — original or primary evidence rather than a copy of duplicate of the evidence
Direct evidence — proves or disproves a specific act through oral testimony based on information gathered through the witness’s five senses
Conclusive evidence — incontrovertible; overrides all other evidence
Opinions — two types: Expert — may offer an opinion based on personal expertise and facts, Non-expert — may testify only as to facts
Circumstantial evidence — inference of information from other, immediate, relevant facts
Corroborative evidence — supporting evidence used to help prove an idea or point; used as a supplementary tool to help prove a primary piece of evidence
Hearsay evidence (3rdparty) — oral or written evidence that is presented in court that is second hand and has no firsthand proof of accuracy or reliability
(i)
Usually not admissible in court
(ii)
Computer generated records and other business records are in hearsay category
(iii) Certain exceptions to hearsay rule:
(1)
Made during the regular conduct of business and authenticated by witnesses familiar with their use
(2)
Relied upon in the regular course of business
(3)
Made by a person with knowledge of records
(4)
Made by a person with information transmitted by a person with knowledge
(5)
Made at or near the time of occurrence of the act being investigated
(6)
In the custody of the witness on a regular basis
Reference: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 310. and CISSP for Dummies, Peter Gregory, page 270-271