I was in a similar position to yourself - I basically had the choice of going for an MSc, or taking the EnCase/FTK exams. In the end I went for the MSc, but I wouldn't necessarily advise the same for everyone.
I'm in a fairly lucky situation, in that while I don't work in a forensics environment, I'm exposed to it everyday. I also have LE experience, which will hopefully count in my favour when I apply for a forensics position. I went for the MSc as I wanted to have a broader forensic knowledge than a certification would give me, plus I never passed my first degree, so I wanted to go back to school and really appreciate it this time round )
As I say, an MSc will give you a more rounded view of forensics, potentially including IT security, case law, ethics and of course plenty of research & presentation experience. Also, your MSc won't expire, unlike EnCe certification - while some of the knowledge you acquire will become outdated, the practices and research skills will stay with you forever. I also found some companies in the past were willing to take on people without degrees or certification (given some relevant knowledge/training) as they wanted to train them inhouse, in the manner they wanted people taught.
However, employers will generally go for an EnCe cert over an MSc (assuming both have equivalent levels of experience). The main benefit to them will be cost - they don't have to invest the 3k+ in training someone who is already certified. Even a lapsed EnCe is much cheaper to renew than a brand new starter.
Sadly, there's no substitute for experience. Any sort of exposure to forensics, be it in LE or in the private sector, is hugely desirable. It's that old chicken & egg syndrome - you can't get experience without having the job, you can't get the job without experience….
jhannon,
I really do not have the experience to voice any arguments on the specific matter you request the forum's advice but it is my (informed) guess that the forensics field is like any other work field. So, to cut to the chase, if you have the money it will probably prove beneficial to acquire an MSc and then venture for a job/carrier… but if you will need to loan (or something similar) to pay your way through an masters degree, it is probably wiser to start looking for a job (even a part time job) and either study for the MSc while working or postpone it for awhile.
K.
Maybe both in same time ?
Practical experience is best and if you can find position where you'll have to do MSc because of job or
have agreement with new employer about that ?
In fact we have situation just like that recently
Hi There,
I completely understand your situation, and theres been some great advice from others on this specific topic. I personally have only been involved within computer forensics for the past year when I graduated from my undergraduate degree in computer networking and decided to pursue a MSc in Computer Forensics. It was tough deciding between employment and experience as opposed to another year of study, but I am extremely pleased that I chose to opt for the MSc study instead.
I think as many have mentioned, it is still a relatively new area and experience is highly desirable but having a masters on top of what you already have doesn't exactly place you in a less advantageous situation but does add extra value.
The way I see it is, there is two avenues you could go down. Firstly you could just join the computer forensic masses or you could look into specialising into a particular area within CF, and although im not yet working (Still in the final stages of my MSc) i still feel that it is the specialisation that will get you noticed. If I was recommending a good MSc course it would be the one I am currently studying for at the University of Greenwich (Medway Campus) it's a brand new course thats been set-up and its delivered extremely well, covering all relevant aspects within this field.