Training and Certification

Who needs digital forensic training and professional certification? Forensic examiners Investigators Crime scene specialists Others… Is certification really needed for employment?

Technical Issues Keeping current on technology –Speed of technological advances –Growing sophistication of computer crimes and attacks –Cost of training –Time required for training Open systems vs. embedded systems vs. telecommunications systems require different forensic approaches Current knowledge and process need to be codified - establish a level of excellence Lack of current data sets (perhaps more of a research issue)

Legal Issues In the future, will forensic examiners and others need to be certified to be able to provide digital evidence in court? The forensic examiner must be the “expert” on the case Certification is desirable but usually optional

Policy Issues Currently no formal requirements or standards for education, training or certification for law enforcement or forensic examiners working in digital forensic areas Forensic examiner training approach –Take the examiner then add computer specialty –Take computer specialists and add forensic specialty Lack of standards (provides no basis for training or certification examinations) How specialized do you get with your training Basic training Advanced topics and specialties No formal mechanism for data sharing Who certifies the certification groups / agencies?

Approaches and Resources Distance learning & media assisted dual learning approaches FBI Regional Computer Forensics Labs – dual role as regional training facilities could be a future possibility? National Cyber Crime Training Partnership Search.org in California IACIS HTCIA AAFS American Board of Criminalists Others….

Challenges How do you develop written procedures for forensic analysis and training procedures and guidelines? What will make good proficiency tests and a general knowledge examination? Inculcating good forensic practices, ethics, and knowledge into the next generation of digital forensic examiners (The lack of standards and rapidly changing technology present additional challenges.)

The future for Digital Forensic Training and Certification Near Term –General certification / knowledge exam Crime Scene Forensic Analysis Investigation Long Term –Specialized certification –Increased training opportunities