Unit 2 Discussion 1: Expert Witness Skills And Qualifications
Clint Nagel
IS4670
Mr. Kohler
1-1-2015
Unit 2 Discussion 1: Investigator or Expert Witness Skills and Qualifications
1. In your opinion, what are the three most important skills for a forensic investigator regarding expert witness testimony? Why?
a. Training and Experience
i. Even though your degree and certifications will prepare you well for a job as a computer forensic investigator, you still will need to adapt to the specific protocols associated with your employer. You'll also need experience in writing up your findings and, if needed, testifying in court. Internships generally last six to 18 months. Without an internship, you should have at least a year working with computers in a manner similar to that needed by law enforcement …show more content…
agencies before you apply. This training and experience also informs you about the current regulations you need to follow as a computer forensic investigator (e.g., when you can seize data).
b. Have Law and Business Sense
i.
Many times, computer forensics practitioners work with traditional forensics experts in criminal investigations to reveal evidence. With frequent work experiences with forensics experts and lawyers, having a general knowledge of relevant laws and ethics is a nice complement to any computer forensics practitioner’s skill set. Furthermore, as many audits are conducted on businesses and illegal organizations are done electronically, computer forensics experts may want to have working knowledge in accounting and/or finance in order to prepare for such jobs.
c. Education
i. Educational requirements for computer forensic investigators are not consistent across the industry as of 2011. This is because the field is still relatively new. Although each employer has different needs, at the minimum you should have a degree or certificate in computer science or forensic investigation, preferably in cybercrime or computer security. For an entry-level position, you'll need at least an associate's degree plus an internship. Employers often look for applicants who have a bachelor's degree or higher.
2. In a court case involving a corporation, what are the implications of having an incompetent or under qualified investigator in the
corporation?
a. Their testimony would be inadmissible, the organization would have to locate a new private investigator that is qualified, competent, and licensed. The organization could lose the case otherwise which would result in their reputation being damaged, significant financial loss due to loss of customers, and the probability of the company going out of business.
3. In a court case involving an individual, what are the implications of having an incompetent or under qualified investigator?
a. If the PI was hired by the individual then that person would be misrepresented. If the individual has enough money, they would be able to locate a PI who is competent, qualified, and licensed. If the individual does not have appropriate means, they will most likely be fined, and serve prison time. If the PI was hired by the prosecution, then the prosecution will have to locate a PI that is competent, qualified and licensed. If they do not, the case will be dismissed and the accused will be free to go.
Reference
Thibodeaux, W. (2011, February 9). Computer Forensic Investigator Qualifications. eHow. Retrieved June 27, 2014, from http://www.ehow.com/info_7914691_computer-forensic-investigator-qualifications.html
IS4670
Mr. Kohler
1-1-2015
Unit 2 Discussion 1: Investigator or Expert Witness Skills and Qualifications
1. In your opinion, what are the three most important skills for a forensic investigator regarding expert witness testimony? Why?
a. Training and Experience
i. Even though your degree and certifications will prepare you well for a job as a computer forensic investigator, you still will need to adapt to the specific protocols associated with your employer. You'll also need experience in writing up your findings and, if needed, testifying in court. Internships generally last six to 18 months. Without an internship, you should have at least a year working with computers in a manner similar to that needed by law enforcement …show more content…
agencies before you apply. This training and experience also informs you about the current regulations you need to follow as a computer forensic investigator (e.g., when you can seize data).
b. Have Law and Business Sense
i.
Many times, computer forensics practitioners work with traditional forensics experts in criminal investigations to reveal evidence. With frequent work experiences with forensics experts and lawyers, having a general knowledge of relevant laws and ethics is a nice complement to any computer forensics practitioner’s skill set. Furthermore, as many audits are conducted on businesses and illegal organizations are done electronically, computer forensics experts may want to have working knowledge in accounting and/or finance in order to prepare for such jobs.
c. Education
i. Educational requirements for computer forensic investigators are not consistent across the industry as of 2011. This is because the field is still relatively new. Although each employer has different needs, at the minimum you should have a degree or certificate in computer science or forensic investigation, preferably in cybercrime or computer security. For an entry-level position, you'll need at least an associate's degree plus an internship. Employers often look for applicants who have a bachelor's degree or higher.
2. In a court case involving a corporation, what are the implications of having an incompetent or under qualified investigator in the
corporation?
a. Their testimony would be inadmissible, the organization would have to locate a new private investigator that is qualified, competent, and licensed. The organization could lose the case otherwise which would result in their reputation being damaged, significant financial loss due to loss of customers, and the probability of the company going out of business.
3. In a court case involving an individual, what are the implications of having an incompetent or under qualified investigator?
a. If the PI was hired by the individual then that person would be misrepresented. If the individual has enough money, they would be able to locate a PI who is competent, qualified, and licensed. If the individual does not have appropriate means, they will most likely be fined, and serve prison time. If the PI was hired by the prosecution, then the prosecution will have to locate a PI that is competent, qualified and licensed. If they do not, the case will be dismissed and the accused will be free to go.
Reference
Thibodeaux, W. (2011, February 9). Computer Forensic Investigator Qualifications. eHow. Retrieved June 27, 2014, from http://www.ehow.com/info_7914691_computer-forensic-investigator-qualifications.html