Certification Program
In an effort to meet the needs of our DCIOs for trained digital forensic examiners and computer crime investigators, DCITA offers the following three levels of certification:
- Certified Digital Media Collector (CDMC)
- Certified Digital Forensic Examiner (CDFE)
- Certified Computer Crime Investigator (CCCI)
Certification Requirements
Certification at the appropriate level will document a candidate’s ability to respond, image, process, and analyze digital evidence and properly document his/her findings utilizing the knowledge and experience gained from subject matter coursework. Certification under this program will be available to individuals who meet the qualifying criteria irrespective of agency affiliation. To be certified by the DCITA or its successor as a Certified Digital Media Collector (CDMC) or a Certified Computer Crime Investigator (CCCI) or a Certified Digital Forensic Examiner (CDFE), a candidate must:
- Obtain DCITA certification by demonstrating subject matter proficiency by successfully completing all required course examinations, exercises and/or test-outs.
- Maintain DCITA certification by completing a minimum of 40 additional hours of DCITA-approved continuing education
or related training every two years and conducting the required number of seizures and/or examinations of digital media or information.
Note: Contact your Program Manager if you have questions about these programs or to determine your eligibility.
Certified Digital Media Collector
Personnel who are the first to respond, secure, preserve, and/or collect digital evidence at crime scenes. Requirements include successful completion or test-out for both the Introduction to Networks and Computer Hardware and the Computer Incident Responders Course. To maintain certification, every two years personnel must conduct at least three acquisitions of digital media or information and attend a minimum of 40 hours of approved continuing education training.
Certified Digital Forensic Examiner
Personnel for whom examination or analysis of digital media are major components of their routine duties. Requirements include successful completion or test-out for the Introduction to Networks and Computer Hardware, the Computer Incident Responders Course, and Windows Forensic Examinations. To maintain certification, every two years personnel must conduct at least three examinations of digital media or information and attend a minimum of 40 hours of DCITA-approved continuing education training.
Certified Computer Crime Investigator
Credentialed law enforcement/counterintelligence personnel who investigate all elements of computer crime to include the examination and analysis of digital evidence. Personnel must also be graduates of a DCITA recognized law enforcement or counterintelligence training facility (e.g. FLETC, Army Ft. Huachuca, etc.) Requirements also include successful completion or test-out for the following:
- Introduction to Networks and Computer Hardware
- Computer Incident Responders Course
- Windows Forensic Examination
- One elective course: Forensic and Intrusions in a Windows Environment; or Forensic and Intrusions in a Linux Environment; or Forensic and Intrusions in a Solaris Environment
To maintain certification, every two years personnel must conduct at least three acquisitions and examinations of digital media or information per year and attend a minimum of 40 hours of approved continuing education training.