In forensic investigations, timing can be just as important as the actions themselves.

Imagine that, within 24 hours of a significant incident, a person:

• Changes their will.
• Changes security or alarm codes.
• Wipes data from a computer.
• Replaces or changes their SIM card or telephone number.
• Restricts access to documents or accounts.

Each of these actions may have an entirely innocent explanation when viewed in isolation.

However, when several significant changes occur within a very short period following a serious incident, investigators, forensic psychologists and the courts may consider the sequence, timing and context as part of the overall picture.

The key questions become:

• Why were these changes made at that particular time?
• Were they planned beforehand or were they a reaction to the incident?
• What evidence supports the explanation given?
• Is the explanation consistent with the documentary and digital evidence?

In forensic psychology, professionals are often interested in behavioural responses to perceived threat. Under stress, people may take rapid steps to regain a sense of control or protect what they believe is at risk.

Importantly, behaviour alone cannot establish guilt or innocence. It is only one piece of the puzzle.

Investigators compare behavioural patterns with objective evidence, including digital records, financial documents, witness statements, phone records and timelines.

When multiple independent sources of evidence tell the same story, they may provide a much stronger basis for understanding what occurred than any single action viewed on its own.

The role of the court is to consider all of the evidence together, not to draw conclusions from one behaviour in isolation.

In forensic work, it is often the combination of timing, consistency, corroborating evidence and documented facts that carries the greatest weight.