In assessing the skills appropriate for the digital forensic practitioner there are two key types of core skills important in providing reassurance to employers. These are general transferable skills and key practical skills. The following general transferable skills in relation to the digital arena are identified as:
- Digital forensic imaging
- Computer hardware inspection and identification of key components
- Extraction and/or analysis of embedded data e.g. EXIF
- Geo-location of digital data
- Intelligence and data analysis
- Triage of portable devices
- Critical thinking and cognitive reasoning
- Handling of exhibits
- Data processing
- Knowledge and understanding of ISO standards and quality management systems.
Further core general transferable skills for forensic practitioners are identified as:
- Integrity, lateral thinking, ability to challenge and question appropriately, critical (constructive) analysis
- Note taking, technical expertise, contamination, knowledge and understanding of ISO standards and quality management systems
- Compliance to method/process, ability to follow procedure, health & safety PPE/COSHH when examining exhibits, manual handling/lifting (if, for example you need to lift a heavy piece of computer equipment)
- Manipulation of trace evidence, e.g. if you come across some trace material relevant to an investigation, measurements, considering both Imperial and SI units
- Photography so you can record your findings more easily.
The key practical skills
In the case of the digital arena this would translate into the following:
- Creation of a forensic image of a digital device including correct handling procedures
- Correct handling and examination of mobile devices
- Categorisation of digital images and data extraction from these images
- Accurate reporting of evidence handling and analysis, both written and verbal.
The importance of these basic transferable skills can be reflected as elements in various assessment scenarios. For example the assessment model for testing these skills would be to give a candidate a straightforward protocol, the person would have to follow the protocol and process. A range of the transferable skills can be covered within each assessment. The advantage not just for employers but also for graduates would be to help make them comfortable at a scene or within a laboratory.
On the day of the practical assessment Candidates should bring with them the following:
- photo ID (passport, driving licence or laminated Student ID card) together with a printed copy of the CSFS confirmation of booking.
- a pen, pencil and ruler.
- a calculator (but not via a mobile/smart phone). Certain calculations (e.g. programmable) may only be used if approved by the Delivery Manager. The Certified Assessment Centres (CACs) can provide scientific calculators if programmable ones are deemed to be unsuitable.
- Questions will be allowed during the assessment sessions but purely for clarification. Only on occasions when the answer could impact on the whole cohort will it be relayed to all candidates.
The Society aims to make this assessment accessible to any candidate who may benefit from undertaking it. Candidates with disabilities or Individual Learning Plans (ILP) should contact us at info@csofs.org. The details of any disability or ILP should be sent to the Society within 3 working days of booking.