The mission of the CIS is to serve as an investigator who contributes computer expertise to criminal investigations.

The CIS has successfully completed a comprehensive training program which enables the CIS to:

The Office of Electronic Crimes is a service integral to operations, not automation. It is organized under the oversight of the Director, CI:TOIS:EC.

The CIS is trained to offer a variety of tools, techniques and innovative approaches in computer related investigations.

The CIS is a member of his/her respective field office, and as such serves as a field office resource and should be on the SAC’s staff. The CIS’s workload is managed by the ALI, who in coordination with the field office, provides knowledgeable oversight and functional supervision to ensure timely and quality workload management, completion of assignments and support for related personnel matters. If necessary, the ALI will ensure that a CIS's case work assignments are completed by reassignment of workload to other CIS's within the field office, or from other field offices. Each CIS has received extensive training, at a substantial time and financial commitment by CI, and should be used exclusively for CIS assignments. (A CIS may assist in other collateral assignments, when it does not impact the performance of the CIS's assignments.) National projects and initiatives require the specific skills offered by a CIS, and up to 50% of a CIS's time may be utilized for nationwide assignments that benefit the entire Criminal Investigation Division.

RESERVED

Special agents selected to attend CIS training should be experienced GS-13 Criminal Investigators who have a technical interest, aptitude and background in using information technology. The field office (SAC), through the ALI, will nominate potential CIS candidates. Candidates undergo a selection process to determine technical knowledge and general ability to ensure successful completion of the CIS training. Final acceptance of CIS candidates into the program is reserved to the Director, CI:TOIS:EC.

The CIS training consists of initial basic training, on the job instruction, and advanced training. The CIS basic training involves an initial six week training course. On the job instruction includes mentoring by an experienced CIS and annual mandatory technical training. Advanced training consists of a minimum two week course and may include other specialized training received throughout the CIS career.

The CIS duties will require a top secret clearance and official passport. Duties may also require frequent travel.

Special agents should consult with the CIS early in an investigation. By participating early in the investigative planning process, the CIS may provide insight into digital evidence issues and planning for enforcement actions involving digital evidence. This includes identifying potential legal issues relating to digital evidence and assisting the special agent, Criminal Tax Counsel, and the United States Attorney’s office in addressing these issues prior to any enforcement action.

The CIS may provide ongoing feedback during the course of the investigation, with insight, guidance and techniques that may substantially assist the case agent.

The CIS may provide the following services:

Computer Investigative Specialist assistance is requested by submission of Form 10908, Computer Investigative Specialist Request for Assistance (see Document Manager) through the SSA, to the CIS, who forwards it to the ALI. The request must include sufficient detail so that resources can be properly assigned.

Special agents should consider using the services of the DIC when:

The DIC workload may be a relevant factor in the decision to make a request.

The SSA and the assigned CIS must approve all requests for the services of the DIC. Special agents will request DIC services using Form 13435, Office of Electronic Crime Data Input Center Request for Services (see Document Manager). Care should be taken to state all requirements and requests clearly and completely on Form 13435. If requirements change after the initial request, an addendum to Form 13435 will be prepared in writing, and forwarded through the SSA and CIS.

The CIS will serve as the liaison between the DIC and the field office. All contact with the DIC concerning transcription services including project status, data entry instructions, and quality issues must be coordinated through or conducted by the CIS.

The ALI will provide managerial oversight of all DIC requests in their respective areas.

In all instances, the CIS must contact the DIC before the records are sent to the DIC. Assignments relating to criminal investigations are handled on a first-in, first-out basis, based on the following hierarchy: subject criminal investigations (SCI) and counter terrorism related investigations, primary investigations (PI) and lastly general investigations (GI). Investigations pending trial and time critical counter terrorism investigations may take precedence for elevation in priority to meet relevant time constraints. Requests for expedited handling will be initiated through the assigned CIS. Conflicting priorities among expedited requests will be resolved through the Director, Electronic Crimes Program (CI:TOIS:EC), after consultation with the respective SACs.

When possible, special agents should attempt to obtain records in electronic form. The CIS should be consulted before requesting electronic records from a witness or record keeper.

If records are obtained in paper form, special agents should provide the original records to the DIC for data entry. If the original records are not available, special agents must provide the most readable records available for data entry.

Special agents must submit records in an organized fashion, i.e., canceled checks, deposit tickets, and deposited items should be associated with the respective bank statements, to facilitate program development and efficient data entry. Records may be returned unprocessed if not properly organized when submitted. The amount of each deposit item is input, when available on the deposit ticket. The amount, check number, and cleared date are input for checks. The checks and deposit items over $1000.00 have the payee or payer, the memo line, and the date written also captured. Additional details (payee, payer, memo line, date written) for items under $1000.00 will not be input without justification from the special agent, specifying investigative importance. The special agent will submit such requests through the CIS. Please note that supplemental requests to input details on items under $1000.00 may be submitted if a subsequent review of the transactions reveals an investigative need.

Documents submitted to the DIC will not be marked on without the concurrence of the requesting special agent.

Special agents should ship the records to the DIC using a tracked shipping method (such as UPS overnight). In sensitive investigations, it may be necessary for special agents to hand carry the records to the DIC. In some situations, special agents may be requested to travel to the DIC to assist in the data entry or programming aspects of the application.

Upon completion of the approved request, the DIC will return the final work product along with the records using a tracked shipping method to the field office. The DIC will also include a listing of the names of all persons who had access to the records. As above, in sensitive investigations special agents may pick up completed work product and records to hand carry back to the field office.