The International Society of Forensic Computer Examiners ®
Certified Computer Examiner
®


Recent Developments!

The CCE Certification test fee is approved for reimbursement from the GI Bill and Veterans Educational benefits. 

This ISFCE is pleased to announce a Call for Papers for the new Jounal of International Society of Forensic Computer Examiners (JISFCE).

Please watch for upcoming announcement on the Master Certified Computer Examiner (MCCE).

The CCE has been approved by ISC2 as an Approved Credential for the Experience Waiver for CISSPs.  CCE certified CISSPs will receive a one year waiver of experience.  See https://www.isc2.org/cgi-bin/content.cgi?page=1016

We are pleased to announce that we currently have over 580 Certified Computer Examiners worldwide. There are about 160 applicants currently in the CCE examination process. 

The CCE certification is rapidly growing in size and recognition.  There are now a number of companies and government agencies that require their forensic computer examiners to hold the CCE certification in order to obtain or maintain their position. 

A number of schools have been or are using our trademarked CCE BootCamp and CCE logos without  authorization or inferring that they are teaching the CCE training course.  Be sure to verify that the school is authorized.  Please visit our list of Authorized Training Centers for more information.
 

The Certified Computer Examiner certification is a result of our desire to:

  • Professionalize and further the field and science of computer forensics
  • Provide a fair, uncompromised process for certifying the competency of forensic computer examiners
  • To set high forensic and ethical standards for forensic computer examiners
  • T o provide a universally recognized, unblemished certification that is available to all who can qualify, for a reasonable cost.
  • Conduct research and development into new and emerging technologies and methods in the field and science of computer forensics 

New - Sample CCE Online Examination

New Sample CCE problem.



The CCE certification is available world wide to both law enforcement and non law enforcement forensic computer examiners who have no criminal record** and who have the appropriate training, experience or are self taught.   A police clearance may be required.

All applicants will be treated equally. There is no "grandfathering" nor granting of the CCE certification without being properly tested and evaluated by the Certifying Board.  All certificants must meet the same certification requirements and all must successfully complete the examination process.  
       
In order to be complete the CCE certification process, the applicant must:

  • Have no criminal record
  • Meet minimum experience, training or self training requirements
  • Abide by the certification's code of ethical standards
  • Pass an online examination
  • Successfully perform actual forensic examinations on three test media 
     

In order to maintain the CCE certification, certified individuals must adhere to the ISFCE code of Ethical Standards and Professional Responsibility and pass proficiency examinations every two years.  There are also experience or continuing education requirements.

A no fee private CCE list server, a forum and chat rooms have been established for all CCEs to discuss forensic issues and to share forensic information with other CCEs.

The initial CCE certification process will encompass:

  • Acquisition, marking, handing and storage of evidence procedures
  • Chain of custody 
  • Essential "core" forensic computer examination procedures
  • The "Rules of Evidence" as they relate to computer examinations
  • Basic PC hardware construction and theory 
  • Very basic networking theory 
  • Basic data recovery techniques 
  • Authenticating MS Word documents and accessing and interpreting metadata 
  • Basic CDR recording processes and accessing data on CDR media
  • Basic password recovery techniques
  • Basic Internet issues  

Various operating system specific training will be available.  

The Microsoft FAT (Windows 95/98) operating systems and forensic issues related to those operating systems.

The Microsoft NTFS (Windows NT/2000/XP) operating systems and forensic issues related to those operating systems.

The Unix/Linux operating systems and forensic issues related to those operating systems.

The MAC/Apple operating systems and forensic issues related to those operating systems.

The initial CCE process consists of a proctored online multiple choice question and answer examination, the forensic examination of a floppy diskette, the forensic examination of a CDR disk and the forensic examination of an image of a hard disk drive .  An 80% or better average score is required to complete the process.  Once the online examination has been completed, the applicant can then begin the forensic examination of the test media.  The forensic examinations are designed to test the forensic knowledge and skills of the examiner.  The examiner must have the appropriate tools.  See Software Necessary for more information.

The primary purpose of this certification is to measure if the applicant understands and uses sound evidence handling and storage procedures and follows sound forensic examinations procedures when conducting examinations. There are reasonable technical issues that must be resolved in order to recover the evidentiary data.  However,
most of the grade is based upon following sound evidence handling and storage procedures and following sound examination procedures, not simply recovering the data.  An 80% total average score will be required to obtain the Certified Computer Examiner(CCE)
® certification.   Do not assume that we know your standard operating procedures. Your grade will be based solely upon what you have written in your reports and the exhibits that you provide. 

The fee for taking the entire process is $395.  See the
Training and or Experience Necessary page for more information.  A proctoring fee may be charged (and may vary) for the initial online test, according to who administers the proctored test.  Authorized testing centers will not charge a proctoring fee.

If you wish to be notified of new information about the Certified Computer Examiner process as it becomes available, you can subscribe to the public CCE list server.  Just Click Here to subscribe.

To unsubscribe:    Click Here to unsubscribe.    

There is a 90 day time limit to complete the CCE process.  Please see our policy on time limits and extension requests for more information.

We recognize that there may be differences of "expert" opinion about technical issues.  A number of recognized computer forensic experts have thoroughly tested and vetted the CCE problems.  We feel that the technical issues are clearly laid out, they are practical and are issues that a competent examiner should be able to discover and report.  However, there is an appeal process for the CCE problems and the granting of extensions.  The appeals board is impartial and will thoroughly examine all appeals by applicants.  

**
No Criminal record-

    Criminal record defined:

    A conviction within or outside the United States of any sexually related offense or crime of moral turpitude.
        
    A conviction within or outside the United States of any crime that is classified as a felony or where the penalty could have been more than 1 year's imprisonment.   Even if no sentence was received, the possible maximum sentence in the jurisdiction where the conviction occurred, is the deciding factor. 
        
    Been the subject of a restraining order or similar court order for stalking, harassment or sexual offenses.
       
    Any conviction for sexual battery or similar sexual offense where the sentence could have been less than 1 year's imprisonment.

Convictions for minor criminal offenses may be allowed, but will be evaluated on a case by case basis.  However, we recommend, even if you have a minor conviction, that you do not apply for the CCE.  Even in the rare instance where  we accept the applicant into the CCE process and they successfully complete the process, any conviction could bring an examiner's credibility into issue when the examiner testifies in court. 
 

The CCE is becoming a valuable credential for forensic computer examiners.  We have found a number of individuals who are stating that they are Certified Computer Examiners (CCE), even though they have not been credentialed by the ISFCE certifying board.  If you are going to use a CCE certified examiner in your case, beware that there are examiners whose credibility could be successfully challenged, if they misstate their CCE credentials.   


All CCE certified individuals will have a certification number.  If your examiner's name is not on
the list on this site, get their certification number and name and provide it to us.  We will verify if they are CCE certified individuals.  If you are making an official inquiry about the CCE certification, please use the contact form.  

We regularly conduct pro-active investigations to help keep the integrity of the CCE secure.  You can help by reporting suspected or unauthorized use  of the CCE designation.  

If you have specific questions, please use the contact form .

 

Certified Computer Examiner (CCE)® is the registered Trademark of the ISFCE LLC. and it may not be used without written permission.  

 

 

Copyright © 2007 ISFCE, LLC

 

 




This counter provided by Webcounter

 

 

 

image
image
image