I'm sure you do reedsie.
But do you really agree with him?
Did you happen to miss this part
"" Ensure you check the experience of your examiner, and not just their company. You may be dealing with someone who performs forensics "on the side" and may only have worked a few dozen cases""
You as a lot of us fall into the category of also doing data recovery work, so..
Based on that comment you would never get work from anyone. A client would call you and say do you have a few dozen cases under your belt, you say no and you don't get hired. In fact no one unless they have a few dozen cases under their belt would get work.
Do you agree with not working?
Perhaps Reedsie read the whole page from which you are quoting and hence read the entire thing in context where I'm talking about how to compare rates. I am talking about comparing the level of experience when comparing the rate. Generally, less experienced examiners charge lower rates more commensurate with their level of experience as a way to gain entry to the market.
For anyone wondering, the quote is from
At the last F3 conference in the UK The Forensic Regulator (A.Rennison) gave a presentation to the gathered masses that in short seemed to suggest that regulation of the industry must take place to bring 'computer forensics' in line with other forensic disciplines such as ballistics and biological examinations. My 29 years experience in LEA confirmed one thing that there is no escaping (Sadly) The courts are impressed with qualifications and furthermore, people with "ology's and degrees" are believed by jurors. I think there will come a time, not too far in the future, where a minimum of a university degree will be required to use the term expert in court. That of course will make certain requirements madatory if you want to enter the field of computer forensics. All the product certification in the world will not stack up against a degree in forensics. The next step will be professional certs like CISSP and CFE. So whatever course you choose a degree will stand above in the eyes of the court.
A lot of LEA or ex LEA will disagree and quote that experience matters and yes it does but, consider what happened many years ago when fingerprints and other 'forensic skills' were originally performed by coppers with special skills. The scientists took it over because the courts demanded it. Its not just our field all of the law enforcement responsibilities that were traditionally done by the 'duty' team are slowly moving over to experts in that field. I will even suggest that future fraud investigations will either be wholly conducted by forensic accountants or assisted by qualified accountants. The public purse must show value for money and too many high profile, expensive cases have been lost by unqualified experts.
The UK legal system requires a person to be an 'expert' before they can offer opinion in court and the term expert can and will be interpreted by them.
Which ever course you choose I wish you luck. The more qualifications the better I think so do them all, as your pocket allows.
OB1
Forensic, No one is trying to attack you, no need to defend your claim.
I was simply inquiring about Data Recovery on a precious post, this in no way states what I was or wasn't practicing.
Without a doubt, it's clear you have a ton of work experience & you are one of the leading forensic consultants on this forum.
Re training in UK - I've tried several times to get details of CCE training via
If SANS do training in UK I'd love to hear about it. As an internal resource I am frequently regarded with some suspicion (or is that fear?), a recognised certification would help allay some of those fears/suspicions I think.
Cults14,
I also tried making contact through the UK site but failed. I did however make contact through the US site (http//
I would also love to hear about any SANS training in the UK.
Do both,
IMHO the MSc is better and I would also say that I have rarely, if ever, seen a job requiring a cert - rather they usually require a degree or MSc.
My 2 pence worth!
Unfortunatly, MSc is now no longer an option for me due to being in a full time job. I guess I will have to go for one of the certs instead.
Thanks all for your input.
I finished a Masters in computer forensics just over a year ago, I did it part-time while in full time employment. It took two years and was very very hard / stressful, but I finished it and will never look back.
I have not got a job in forensics yet, even with a Masters,(and 9 years I.T experience) its still hard to get that elusive "foot in the door!" People don't seem to give you a chance anymore these days, they all want 1, 2, 3 + years experience, which then becomes the eternal loop of how do you get the experience without anybody giving you the chance to prove yourself!
/sigh (
I'm considering doing the CCE, but I'm based in Ireland, so not sure if its available. As people here have mentioned, its not available in the UK, its for sure damn not going to be available on this tiny little island of Ireland!!!!
Best of luck thou man, hope you get what you need and get a good job at the end of it! wink
Thanks 4rensics. Good luck to you as well.
Regarding the CCE, you can do it self study online, info at http//
Has anybody heard of InfoSec Institute? Their training program also looks appealing but just wondering if anybody has had any experiences with them? (http//