Forensics: Computer Forensics Qualifications

Below is a list of qualifications that can obtained in computer forensics.

EnCE –  EnCase Certified Examiner: This qualification, is provided by Guidance Software, and is based on the use of EnCase. There is a a two part exam, a theory and practical exam. It is currently the most wildly accepted (other than CCFE) and demanded qualifications, particular with the US, or UK firms who work a lot with the US.This is, in part, due to the huge marketing drive Guidance have engaged in. The book for those who want to revise for their EnCE exam  is EnCase computer Forensics: The Office Guide

ACE –  AccessData Certified Examiner: This computer forensic qualification is by AccessData, the makers of FTK, offering, designed to compete with EnCE. It has not made the same in roads as ACE, no doubt due to the problems with FTK 2.0, but has made a brilliant marketing decision of partnering with a university.

CCE – Certified Computer Examiner: This international computer forensics qualification is software independent, its not as popular as EnCE or CFCE, but is gaining ground and is well respected.

CCFE – Certified Computer Forensics Examiner: This exam is much like the EnCE exam, in  two parts – a theory and practical, but is sofware independant. Its US based, and provided by the IACRB. Perhaps due to its US base its not made as much impact in the UK as other qualifications.

CFCE – Certified Forensic Computer Examiner – This high quality examination can only be taken by law enforcement staff and is respected internationally. Its market influence is limited only by the amount of people eligible to take it. Once a person is qualified, they are able to join  IACIS – International Association of Computer Investigation Specialist

CFIE – Certified Forensic Investigator Examiner –This qualification is simply a qualification for completing a course at 7Safe. 7Safe is an excellent company,  with quality training, but it is not a national/internationally accepted qualification.

CEH – Certified Ethical Hacker: This qualification is, like the CFIA, company specific, and despite its attempts has not managed to become a “standard” like EnCE. The official study book for the CEH exam is the Official Certified Ethical Hacker Review Guide

CHFI – Computer Hacking Forensic Invesitgator: This is produced by the same organisation, ECCouncil, as the CEH above. Like the CEH the CHFI does not appear to have taken off in popularity.  The revision book for this course is The Official CHFI Study Guide

BSC and MSc – Degrees – There are many universities in the UK that offer degrees in computer forensics . Sadly, to become a university now a days it appears that all that is required is room and a rubber stamp. Not all universities are created equal, and a degree in some is unlikely to teach those going into the industry how do their job. But, its better than no degree at all.

SANS GCFA – GIAC Certified Forensic Analyst: This qualification is provided by the well respected SANS organization, and like the CCE, CCFE and CFCE is software independant.

CFE – Certified Fraud Examiner: Not a computer forensics qualification, but an qualification often held by computer forensics experts. Highly respected and worth getting.