By Andy Spruill
October 5, 2009
As I travel around and speak to various groups, I am constantly being approached by people who are excited about the prospect of moving into this fascinating discipline within the forensic sciences. Some are business owners wanting to expand their service offerings, some are seasoned individuals looking for a change in their current career paths, and some are students looking to find their calling in life. I, of course, encourage every one of them to pursue this desire. One of the greatest challenges our discipline currently faces is a shortage of well-trained and experienced personnel. It’s why I take time out of my life to spend several hours every week teaching at a local university. It has to start somewhere. But I digress and will save this point for another day.
In talking to them about this field, I tell all of them, right up front, that to be successful and respected in this field there are basically three areas in which they must build up some amount of expertise. Like a three legged stool, each must be equally developed, or they will find themselves slipping off the stool or totally falling down. They are:
Area Expertise. Most of them have this one pretty well developed. In our discipline we are talking about some technical expertise in the digital world. Whether it’s in computer science, networking environments, or programming, they have to have some skill that puts them ahead of the everyday lay person. Training and experience in the specialty is a must have requirement for any of the forensic disciplines and ours is no different.
Unfortunately, many of them think that this one requirement is all that is required to make the jump successfully. Many have made this jump based on this requirement alone, and many have failed because they realized too late that they had neglected the other two basic requirements.
The Law. Forensics is all about one thing and one thing only; the presentation of scientific evidence in a court of law. I tell them they can’t play ball if they don’t know the rules of the game. They don’t have to be lawyers, but they do need to know what is required by the courts when seizing, analyzing and presenting digital evidence in legal proceedings. Simple things like understanding Daubert / Frye or where in the litigation process the work they will be doing will fall and what will be required of them in each phase.
Courtrooms… Lawyers… Judges… Juries… Oh My!
Many of them have never experienced what is required to give a technical presentation in front of a group of people, much less have someone publically challenge their findings and opinions. Simply put, it’s not for everyone, but it is ultimately where all this is heading. This generally gives many of them some pause to think. So, on to the third and most important of the three legs of the stool:
Forensic Methodology. Understanding and following modern forensic practices and methods is essential. Digital forensics is only one of many forensic disciplines within the forensic sciences. Handling our medium has its own special requirements, just as all of the other disciplines have their own specific requirements. But there are some basic procedures that all must follow such as evidence handling, quality assurance controls, and documentation and reporting. Failure here generally means that all of the hard work and effort will have been for naught.
By this point in the conversation, many of them have come to realize that they have their work cut out before they can hang that shingle outside of their doors. Invariably, they all ask what they can do to get these legs developed. Where can they go to get started? Well, here are some suggestions:
Formal Education. Seek out local universities and colleges that have Forensic Science programs. Many are now offering coursework specifically in the digital forensic discipline. Some of these institutions have integrated these courses into their existing full-time programs, like at Cal Poly Pomona. Others have built it into a certificate program in their extended education curriculum, like at Cal State – Fullerton.
Focused Training. Seek out training in specific tools and technologies, like those offered here at Guidance Software for the tools built on our EnCase technology.
Professional Associations. Seek out, join, and actively participate one of the many professional associations and groups specializing in the forensic sciences or digital forensics. Groups like the High Tech Crime Investigators Association or IACIS have local chapters all over the world.
Personal Development. If problems with public speaking, join groups like Toastmasters. If weak in technical writing skills, debate or critical thinking, take some courses with your local community college.