Middle East Cybercrime Forum Beirut 23 rd – 24 th February 2006 Harmonising Cybercrime Training Across International Borders Developing a cybercrime training strategy The UK example The EU Agis Programme Developing and delivering an international training programme Nigel Jones – Chair Interpol Working Party on IT Crime (Europe) Head of High Tech Crime Training NCPE Specialist Training Wyboston, England Tel: +44 (0) Web:

Developing a Cybercrime Training Strategy The UK Example

UK High Tech Crime Training Programme Aim: To design, develop and deliver an academically and professionally accredited modular high tech crime training programme for the police service. Linked to ACPO National High Tech Crime Strategy Supports Home Office E-Crime Strategy

Training Support Chris Hatfield Course Managers Paul Bayer Neil Williams Jim Stark Training Co-ordinator Susie Woodman Corrina Chester Tracey Stevens Technical Support Greg Pember Michael Ogunseye Irene Butterwick Mark Cameron Kevin Mansell Head of High Tech Crime Training Deputy Head of High Tech Crime Training Bill Crane Legal Researcher Nigel Jones

Computer Crime? IT Crime? Cyber Crime? Internet Crime? High-Tech Crime? Technology Crime? CRIME Theft Deception Harassment Identity Theft Murder Incitement Terrorism Narcotics Child Abuse Fraud Racism Robbery What do we mean by Cybercrime

How IT Impacts on Crime Technology as: a target of crime an aid to crime a witness to crime a communications tool a storage medium

All Police Officers – Introductory Level for Digital Evidence Advanced Level for IT Crime Specialists Covert Internet Investigators Introductory Level Forensic IT Analysts & Network Investigators All Investigators and Managers Child Protection and Economic Crime Investigators Internet Researchers Cybercrime Training Structure Audience Volume Knowledge Level

An e-learning module for all 1 st Responder E-learning Based on module for new recruits introduced in 2003 Introductory training to reach the entire police service Six Chapters Students are assessed at each stage Can be taken at any computer Pre requisite for a number of our courses What does it look like?

National Occupational Standards E-Crime Developed by Skills for Justice Provides standard skill sets to be achieved Cross discipline = public and private sector Covers: e-crime investigators IT Forensics Supported by the UK Police Service Will apply to all police officers

Eight standards dealing with: Identifying and securing, seizing and recording electronic evidence (EC1 + EC2) Capturing and preserving electronic evidence (EC3) Investigating electronic evidence (EC4) Evaluating and reporting electronic evidence (EC5) Conducting Internet investigations (EC6) Conducting Network investigations (EC7) Conducting Covert Internet investigations (EC8 National Occupational Standards E-Crime

MSc in Cybercrime Forensics Offered by Canterbury Christchurch University Route to qualification for forensic analysts and network investigators Initially delivered at Wyboston for L E and.gov staff Duration – Part time – min 2 years – max 4 years This is a taught Level HE4 extension programme. Entry requirements: Applicants will typically be at the level of a good honours degree or equivalent. Students who do not possess a degree, but can show the abilities that would meet learning outcomes similar to a degree would be able to enter the programme: Significant professional experience Professional experience plus lower level qualifications Professional experience plus IT/Cybercrime technical courses

The EU Agis Programme Developing and Delivering an International Training Programme

Agis EU Training Initiative 2 year project now completed Delivered introductory level IT Forensics and Network Investigators course to 60 students from EU and candidate countries Translated into Spanish, German and Turkish All training material made available to LE worldwide. Created a network of (9) LE cybercrime training centres Interpol to deliver 4 introductory courses in next 12 months New project begins in November led by An Garda Siochana Will deliver 3 intermediate level courses for same audience All material to be made available at end of project New bid submitted in Jan 2006 Contributory partners (Microsoft) If successful will deliver a further 3 intermediate level courses

Report on Courses 60 Students from 27 EU and Candidate Countries (not Belgium) and Norway, Switzerland and Interpol Course 3 had many changes from course 1 based on feedback from students and trainers Evaluation at time of course and post course Course evaluation – total of 8,261 questions answered by students at level 1 50% return rate on post course evaluation (level 3)

Agis October 2004 Total Positive vs Negative returns Agis October 2004 – Positive vs Negative Returns 1566 Questions in Total – 1491 Positive – 75 Negative

Agis – The current partners Austria Bulgaria France GermanyIreland x 2 Portugal Spain Interpol United Kingdom x 2 Netherlands Malta Europol Latvia Belgium Greece Finland

Law enforcement personnel at all levels, prosecutors and the judiciary must be trained and equipped to address high-tech crimes. Cybercrime training should be harmonised and accredited by academic and/or professional bodies on a national and international level Aims, objectives and learning outcomes for each level of training should be agreed internationally Cybercrime training organisations should work together to develop training products, share trainers and training material to avoid duplication of effort. Countries with cybercrime training institutes should engage in coordinated outreach activity to deliver cybercrime training to other countries. Conclusions

Middle East Cybercrime Forum Beirut 23 rd – 24 th February 2006 Harmonising Cybercrime Training Across International Borders Nigel Jones – Chair Interpol Working Party on IT Crime (Europe) Head of High Tech Crime Training NCPE Specialist Training Wyboston, England Tel: +44 (0) Web: Thank you for your attention