|
The International Society of
Forensic Computer Examiners ®
Certified Computer
Examiner ®
Recent Developments!
The CCE Certification test fee is approved for reimbursement from the GI Bill and Veterans Educational benefits.
This ISFCE is pleased to announce a Call for Papers for the new Jounal of International Society of Forensic Computer Examiners (JISFCE).
Please watch for upcoming announcement on the Master Certified Computer Examiner (MCCE).
The
CCE has been approved by ISC2
as an Approved Credential for
the Experience Waiver for CISSPs.
CCE certified CISSPs will
receive a one year waiver of
experience. See https://www.isc2.org/cgi-bin/content.cgi?page=1016
We
are pleased to announce that
we currently have over 580 Certified
Computer Examiners worldwide.
There are about
160 applicants currently in the CCE examination process.
The CCE certification
is rapidly growing in size and
recognition. There are now a number of companies and government agencies that
require their forensic computer examiners to hold the CCE certification in order to obtain or maintain their position.
A
number of schools have been or are using
our trademarked CCE BootCamp and CCE logos
without authorization or inferring
that they are teaching the CCE
training course. Be
sure to verify that the school is authorized. Please visit our list of Authorized Training
Centers for more information.
The Certified
Computer Examiner certification is a result of our desire
to:
-
Professionalize and further
the field and science of computer
forensics
-
Provide a
fair, uncompromised process for certifying the
competency of forensic computer
examiners
-
To set high
forensic and ethical standards for forensic computer
examiners
-
T o provide
a universally recognized, unblemished certification that
is available to all who can qualify, for a reasonable
cost.
-
Conduct research and
development into new and emerging technologies and
methods in the field and science of computer
forensics
New - Sample CCE Online
Examination
New Sample CCE
problem.
The CCE
certification is available world wide to both law
enforcement and non law enforcement forensic computer
examiners who
have no criminal
record** and who
have the appropriate training, experience or are self
taught. A police clearance may be required.
All applicants
will be treated equally. There is no "grandfathering" nor
granting of the CCE certification without being properly
tested and evaluated by the Certifying
Board. All certificants must meet the same
certification requirements and all must successfully
complete the examination process.
In order to be complete the CCE certification process,
the applicant must:
-
Have no
criminal record
-
Meet
minimum experience, training or self training
requirements
-
Abide by
the certification's
code of ethical
standards
-
Pass an
online examination
-
Successfully perform actual
forensic examinations on three test
media
In order to
maintain the CCE certification, certified individuals must
adhere to the ISFCE code of Ethical Standards and
Professional Responsibility and pass proficiency
examinations every two years. There are also
experience or continuing education requirements.
A no fee private CCE list server, a forum and chat rooms
have been established for all CCEs to discuss forensic
issues and to share forensic information with other
CCEs.
The initial
CCE certification process will encompass:
-
Acquisition, marking, handing
and storage of evidence
procedures
-
Chain of
custody
-
Essential
"core" forensic computer examination
procedures
-
The "Rules
of Evidence" as they relate to computer examinations
-
Basic PC
hardware construction and
theory
-
Very basic
networking theory
-
Basic data
recovery techniques
-
Authenticating MS Word
documents and accessing and interpreting
metadata
-
Basic CDR
recording processes and accessing data on CDR
media
-
Basic
password recovery techniques
-
Basic
Internet issues
Various operating system specific
training will be available.
The
Microsoft FAT (Windows 95/98) operating systems and
forensic issues related to those operating systems.
The
Microsoft NTFS (Windows NT/2000/XP) operating systems and
forensic issues related to those operating
systems.
The
Unix/Linux operating systems and forensic issues related
to those operating systems.
The
MAC/Apple operating systems and forensic issues related to
those operating systems.
The initial CCE process consists of a
proctored online multiple choice question and answer
examination, the forensic examination of a floppy
diskette, the forensic examination of a CDR disk and
the forensic examination of an image of a hard disk
drive . An 80% or better average score is
required to complete the process. Once the
online examination has been completed, the applicant
can then begin the forensic examination of the test
media. The forensic examinations are designed to
test the forensic knowledge and skills of the
examiner. The examiner must have the appropriate
tools. See
Software
Necessary for more information.
The primary purpose of this certification is to
measure if the applicant understands and uses sound
evidence handling and storage procedures and follows
sound forensic examinations procedures when conducting
examinations. There are reasonable technical issues
that must be resolved in order to recover the
evidentiary data. However, most of the
grade is based upon following sound evidence handling
and storage procedures and following sound examination
procedures, not simply recovering the data.
An 80% total average score will be required to
obtain the Certified Computer
Examiner(CCE) ® certification. Do not assume
that we know your standard operating procedures. Your
grade will be based solely upon what you have written
in your reports and the exhibits that you
provide.
The fee for taking the entire process is $395.
See the
Training and or Experience
Necessary page for more information. A
proctoring fee may be charged (and may vary) for
the initial online test, according to who
administers the proctored test. Authorized
testing centers will not charge a proctoring
fee.
If you wish to be notified of new
information about the Certified Computer Examiner
process as it becomes available, you can subscribe to
the public CCE list server.
Just
Click
Here to subscribe.
There is a 90 day time limit to
complete the CCE process. Please see our policy on time limits and extension requests for more information.
We recognize that there may be differences of
"expert" opinion about technical issues. A
number of recognized computer forensic experts have
thoroughly tested and vetted the CCE problems.
We feel that the technical issues are clearly
laid out, they are practical and are issues that a
competent examiner should be able to discover and
report. However, there is an appeal process for
the CCE problems and the granting of extensions.
The appeals board is impartial and will
thoroughly examine all appeals by applicants.
** No Criminal
record-
Criminal record
defined:
A conviction within or outside the United States of
any sexually related offense or crime of moral
turpitude.
A conviction within or outside the United States of
any crime that is classified as a felony or where the
penalty could have been more than 1 year's
imprisonment. Even if no sentence was
received, the possible maximum sentence in the
jurisdiction where the conviction occurred, is the
deciding factor.
Been the subject of a restraining order or similar
court order for stalking,
harassment or sexual offenses.
Any conviction for sexual battery or similar sexual
offense where the sentence could have been less than
1 year's imprisonment.
Convictions for minor criminal
offenses may be allowed,
but will be evaluated on a case by case basis.
However, we recommend, even if you have a minor
conviction, that you do not apply for the CCE.
Even in the rare instance where we
accept the applicant into the CCE process and they
successfully complete the process, any conviction
could bring an examiner's credibility into issue when
the examiner testifies in court.
The CCE is becoming a valuable credential for
forensic computer examiners. We have found a
number of individuals who are stating that they are
Certified Computer Examiners (CCE), even though they
have not been credentialed by the ISFCE certifying
board. If you are going to use a CCE certified
examiner in your case, beware that there are
examiners whose credibility could be successfully
challenged, if they misstate their CCE
credentials.
All CCE certified individuals will have a
certification number. If your examiner's name is
not on the list on this
site,
get their certification number and name and provide it
to us. We will verify if they are CCE
certified individuals. If you are making an
official inquiry about the CCE certification, please
use the contact
form.
We regularly conduct
pro-active investigations to help keep the integrity
of the CCE secure. You can help by reporting
suspected or unauthorized use of the CCE
designation.
If you have specific questions,
please use the contact form . |
Certified
Computer Examiner (CCE)® is the registered Trademark of
the ISFCE LLC. and it may not be used without written
permission.
|
Copyright © 2007 ISFCE, LLC

This
counter provided by Webcounter
|
|