Training and Certification

1. Training and Certification

2. Who needs digital forensic training and professional certification? • Forensic examiners • Investigators • Crime scene specialists • Others… • Is certification really needed for employment?

3. Technical Issues • Keeping current on technology • Speed of technological advances • Growing sophistication of computer crimes and attacks • Cost of training • Time required for training • Open systems vs. embedded systems vs. telecommunications systems require different forensic approaches • Current knowledge and process need to be codified - establish a level of excellence • Lack of current data sets (perhaps more of a research issue)

4. Legal Issues • In the future, will forensic examiners and others need to be certified to be able to provide digital evidence in court? • The forensic examiner must be the “expert” on the case • Certification is desirable but usually optional

5. Policy Issues • Currently no formal requirements or standards for education, training or certification for law enforcement or forensic examiners working in digital forensic areas • Forensic examiner training approach • Take the examiner then add computer specialty • Take computer specialists and add forensic specialty • Lack of standards (provides no basis for training or certification examinations) • How specialized do you get with your training • Basic training • Advanced topics and specialties • No formal mechanism for data sharing • Who certifies the certification groups / agencies?

6. Approaches and Resources • Distance learning & media assisted dual learning approaches • FBI Regional Computer Forensics Labs – dual role as regional training facilities could be a future possibility? • National Cyber Crime Training Partnership • Search.org in California • IACIS • HTCIA • AAFS • American Board of Criminalists • Others….

7. Challenges • How do you develop written procedures for forensic analysis and training procedures and guidelines? • What will make good proficiency tests and a general knowledge examination? • Inculcating good forensic practices, ethics, and knowledge into the next generation of digital forensic examiners • (The lack of standards and rapidly changing technology present additional challenges.)

8. The future for Digital ForensicTraining and Certification • Near Term • General certification / knowledge exam • Crime Scene • Forensic Analysis • Investigation • Long Term • Specialized certification • Increased training opportunities