(a) A Team and NIST will take all necessary steps in moving and preserving evidence obtained during the course of an investigation under the Act to ensure that such evidence is preserved.

(b) In collecting and preserving evidence in the course of an investigation under the Act, a Team and NIST will:

(1) Maintain records to ensure that each piece of evidence is identified as to its source;

(2) Maintain and document an appropriate chain of custody for each piece of evidence;

(3) Use appropriate means to preserve each piece of evidence; and

(4) Ensure that each piece of evidence is kept in a suitably secure facility.

(c) If a Federal law enforcement agency suspects and notifies the Director that a building failure being investigated by a Team under the Act may have been caused by a criminal act, the Team, in consultation with the Federal law enforcement agency, will take necessary actions to ensure that evidence of the criminal act is preserved and that the original evidence or copies, as appropriate, are turned over to the appropriate law enforcement authorities.