Presented by: Detective Inspector Paul Gillen, Head Garda Computer Crimes Investigation Unit & Chairperson of the Europol Cybercrime Investigation Training Harmonisation Group European Cybercrime Training Programmes & The Europol Cybercrime Investigation Training Harmonisation Group

Falcone Programme 2002  European Commission/Garda Initiative- To research among other things best practice in the area of Cybercrime training for Law Enforcement Officers within the EU MS  Group consisted of experts/practitioners from 10 member States  3 Meetings over one year period and in December 2002 the programme published 3 reports : –Recommendations on Training for Hi-Tech Crime Investigators in EU Member States. –Recommendations on an Information Network linking EU hi-tech crime investigators in MS. –Production of a Best Practice Guide to assist Hi-Tech Crime Investigators in the MS. * FALCONE PROGRAMME SPONSORED BY THE EUROPEAN COMMISSION

Training: Agreement was reached by the experts that a European approach was required to Harmonise Cybercrime training across the E.U. Recommended at 4 Levels: 1. Basic (Certificate), 2. Intermediate (Diploma), 3. Advanced (Masters Degree) & 4. CPD/Non-Specialist (accredited standalone modules) Co-operation is advisable between Academic Institutions and Law Enforcement Agencies in each of the States AND Academic institutions should accredit the training and education programmes. There was a need to have courses monitored and administered by a central body. A role for Europol in this area was seen as desirable – (Q the birth of the: Europol Cybercrime Investigation Training Harmonisation Group later in 2007.) MAIN Recommendation: –This report should be implemented as a matter of priority. What were the Project Findings?

European Commission Funded AGIS Programme - AGIS 2003/4 Project Partners Bulgaria DenmarkGermany Ireland Spain Interpol U K Finland Europol Portugal Managed by UK National Hi-Tech Crime Training Centre – Now NPIA

Programme Aim: To develop, deliver and evaluate a Pilot collaborative cybercrime training programme. (Level 1 as identified by the Falcone project) for European law enforcement staff that will enhance their capability to combat cybercrime both nationally and internationally This course was developed & delivered successfully in 2004! - Accredited by UCD CCI in 2006 & delivered in many EU MS, Sth America, India and Australia since it’s upgrade in 2007, Next scheduled delivery December 2008 in UCD CCI and then January in Cyprus by Interpol & UCD CCI.

So what did AGIS 2003/2004 Recommend? 1.The Agis project report recommended that the project should continue to a next phase LEVEL 2 and begin the development of an accredited intermediate level (Diploma) of Cybercrime Investigation training and that this work should be co- ordinated by Ireland’s Garda Síochána in partnership with University College Dublin;

European Commission Funded AGIS Programme: AGIS 2005 Project Partners BulgariaDenmark Germany Ireland Spain Interpol U K Finland Europol Belgium Italy Portugal

Objectives develop, deliver and evaluate a collaborative Cybercrime training programme. (Diploma - level 2 identified by the Falcone project) for European law enforcement staff that will enhance their capability to combat Cybercrime both nationally and internationally; So in 2005/2006 we developed and piloted 3 modules on specialist topics as follows, –Internet Investigations, –Network Investigations –NTFS Forensics the modules were accredited by UCD as part of the overall aim of the development of A Masters Degree programme in Forensic Computing and Cybercrime Investigation for Law Enforcement Officials Globally;

What did AGIS 2005 recommend? The AGIS project should continue to the next phase (Diploma - Level 2 - part 2) of developing 3 further intermediate level training courses and this work should be co- ordinated by The United Kingdom’s NPIA and the Centre for Cybercrime Investigation UCD.

European Commission Funded AGIS Programme Agis 2006 Partners Austria Bulgaria France GermanyIreland x 2 Portugal Spain Interpol United Kingdom x 2 Netherlands Malta Europol Latvia Belgium Greece Finland Austria Bulgaria France GermanyIreland x 2 Portugal Spain Interpol United Kingdom x 2 Netherlands Malta Europol Latvia Belgium Greece Finland

Objectives develop, deliver and evaluate a collaborative Cybercrime training programme. (Diploma - level 2 identified by the Falcone project) for European law enforcement staff that will enhance their capability to combat Cybercrime both nationally and internationally; So in 2006/2007 we developed and piloted a further 3 modules on specialist topics as follows, –Linux Forensics, –Mobile Telephone Forensics –Wireless LANS and VOIP the modules were accredited by UCD as part of the overall aim of the development of A Masters Degree programme in Forensic Computing and Cybercrime Investigation for Law Enforcement Officials Globally; WE NOW HAVE 7 MODULES TOWARDS THE MSc

So guess what AGIS 2006 recommended? The AGIS project should continue to the next phase (Level 2 - part 3) of developing 3 further intermediate level training courses and the advanced Masters Degree in Forensic Computing and Cybercrime Investigation, in partnership with Europol, Interpol, private industry, UCD CCI and LE from all EU member states. YES! YOU GUESSED THE PATTERN!

THE NEXT STEP? European Commission ISEC Funding Programme PREVENTION OF AND FIGHT AGAINST CRIME ANNUAL WORK PROGRAMME 2008

Objectives Continue the development, delivery of a collaborative Cybercrime training programme. (level 2 and level 3 as identified by the Falcone project) for European law enforcement staff that will enhance their capability to combat Cybercrime both nationally and internationally; Develop 3 modules on specialist topics such as: –Advanced Scripting, Live Data Forensics, Microsoft Vista Forensics –All modules to be accredited by UCD as part of the overall aim of the development of the masters programme in Forensic Computing and Cybercrime Investigation. Finally UCD CCI will deliver (with the assistance from Europol, Interpol and all EU member states) all the modules from all 3 projects with additional mainstream academic material as part of the first global LE Masters Degree in Forensic Computing and Cybercrime Investigation. Graduation in UCD of 30 Investigators 1 from each EU member state in September 2011 with a Masters Degree in Forensic Computing and Cybercrime Investigation. The programme is open to any LE officer on a not for profit basis globally and more of that from my colleague from UCD.

Costs/Financial Partners  If we are successful with this bid this will be the largest LE project ever sponsored by the EU Commission; We have 30 partners from EU and Non EU member states, EU bodies, Global Industry & EU academic institutions.  Total Cost over 3 years : €2.7 million  EU COMMISSION:€2.4million  An Garda Siochana - Ireland - €160,000  NPIA - UK - €100,000  North Rhine Westphalia Police - €5,000  Microsoft Corporation have also donated $150,000 to the pre- project preparation of course material by UCD and LE Trainers and developers.  We await confirmation of funding from the EU Commission for this project next week!

Europol Cybercrime Investigation Training Harmonisation Group From the Recommendations AGIS Programme 2005: Europol to set up the Working Group first meeting in July 2007 –The Group has an agreed terms of reference Our Primary Objective: –To coordinate the efforts within the EU on High Tech Crime training in order to establish a certified training curriculum for LE investigators within Europe and to disseminate this beyond the EU to assist other LE agencies who wish to do the same thing. Important Partners: –European Commission, OLAF, EuroJust, CEPOL, Interpol, Council of Europe, United Nations. –UCD Centre for Cybercrime Investigations, University of Troyes, Canterbury Christchurch University, University of Bologna. –Industry

Some projects currently underway at the group; –Create Register of Cybercrime Investigation trainers –Create centralised system for the dissemination of training material –Create a system of maintenance and upgrade of course content –New Course Development –Develop a “train the trainers” programme for LE –Administer the ISEC Programmes scheduled for 2008 and beyond –Continue to evaluate the programme and to react to changing needs and focus using suitable qualified partners academic institutions and police cybercrime training schools

Our Five year plan… The ISEC bid 2008 (-2011) –Working towards a certified MSc programme The ISEC bid 2009 –Develop three additional modules for further specialisation Upgrade AGIS Courses The ISEC Bid 2010 – Develop three additional modules for further specialisation Solidify partnership with Industry –Develop training for Industry dealing handling of evidence, case preparation etc. The ISEC Bid 2012 rerun the MSc.

Some points for your consideration; How do OSCE participate? – OSCE could apply to join the Europol group as a special observer and they could take receipt of our training material for onward transmission to you the members of this group for your information and use. Scholarship fund – UCD has set up a scholarship fund to assist LE officers from developing states to receive this high level training – support for this scholarship fund would ensure access to the training material and high level qualifications delivered by UCD in partnership Europol, Interpol and 30 EU MS, without duplication of effort by your country, agency or organisation The benefits are LE staff receive high level academically accredited training for cybercrime investigation and forensic computing. Value for money- the programme of work is “not for profit” for LE, little travel as possible most material will be delivered online ensuring maximum value and greatest penetration for LE globally.