Certified Forensic Computer Examiner

From Wikipedia, the free encyclopedia

The Certified Forensic Computer Examiner (CFCE) credential was the first certification demonstrating competency in computer forensics in relation to Windows based computers. The CFCE training and certification is conducted by the International Association of Computer Investigative Specialists (IACIS), a non-profit, all volunteer organization of current and former law enforcement members.

Contents

[edit] History

IACIS was formed and commenced training in 1990. The predecessor to the CFCE was the DOS Processing Certificate (DPC). The CFCE was introduced in 1998 when the training was expanded to include examination of Windows based computers. The course materials also cover other operating systems and such as Linux and Mac OS and their associated file systems, however the certificate only states proficiency in Windows.

[edit] Eligibility

In order to become a member of IACIS and undertake the CFCE or Certified Electronic Evidence Collection Specialist courses, a person must generally be a full time member - sworn or unsworn - of a law enforcement agency. In some cases, a contract employee of a law enforcement agency or retired law enforcement officer may be eligible. All IACIS members must sign agreement with the Code of Ethics.

[edit] Certification process

The certification process may be taken internally or externally.

An internal certification candidate must attend a 2 week training course that is conducted yearly by IACIS in the first half of the calendar year. Upon successful completion of the course, the member is assigned a (volunteer) coach. The coach guides the student through the assessment phase, often by suggesting reading materials or experiments for the student, which is intended to assist the student in fully understanding issues with which the student may be having difficulty.

An external certification candidate does not attend the training, but rather proves themselves by completing the assessment phase under the supervision of a monitor, without the benefit of coaching.

The assessment phase runs annually from 1 July to 30 June with milestones for completion of specific objectives throughout the year. The assessment currently consists of 5 practical problems, a research problem, and an extensive written examination.

[edit] Recertification

In order for certification to remain current, a member must undertake a proficiency test once per 3 year period after certification as well as complete 60 hours of continuing training in computer forensics or a related field. Additionally, the member must conduct as a minimum an average of 1 forensic examination per year, for a minimum of 3 examinations over the 3 year period. The member must also pay dues ($50 per year) and remain a member in good standing of IACIS.

[edit] Recognition

CFCE is one of the most widely recognized non-tool certifications in computer forensics for current and former law enforcement personnel. Some organizations such as the Computer Forensics Laboratory at Miami-Dade Police require their members to complete and maintain this certification (see http://www.miamidade.gov/MDPD/fcls.asp).

[edit] External links