Design layered controls for digital forensic investigation across deterrence, detection, delay and response.
Digital Forensic Investigation and Electronic Evidence Analysis
Practical training in digital forensic investigation, grounded in real cases and applied to your own operation.
📍 Tripoli🗓️ 5 training days📚 4 modules🎓 Accredited certificate
5intensive training days
4scientific modules
8training sessions
32detailed points
Course Overview
Guard force performance on digital forensic investigation reflects supervision, not instruction. A control on this part of corporate security practice that is never exercised is an assumption, not a defence. Improvement in the wider corporate security practice agenda stalls when it depends on one capable individual rather than a defined method. Participants test their assumptions about digital forensic investigation against scenarios designed to break weak ones. The programme converts the practice within corporate security practice from an area of general awareness into a set of repeatable practices. The level assumes working familiarity with the protected site but no prior formal training in the corporate security practice discipline. Applied research in corporate security practice consistently shows that early structure around digital forensic investigation reduces downstream rework. They leave able to brief senior management on this area of corporate security practice in terms that support a decision. The programme closes with an action plan for this part of corporate security practice that each participant writes for their own organisation.
Expected Learning Outcomes
Build the reporting on digital forensic investigation that senior management can act on.
Compare the organisation's handling of digital forensic investigation with recognised practice, and close the material gaps.
Sequence improvements to digital forensic investigation so that each step makes the next one easier.
Plan the response and escalation for incidents involving digital forensic investigation.
Build the investigation capability and evidence handling for digital forensic investigation.
Apply a repeatable review cycle to digital forensic investigation and act on what it produces.
Who Should Attend
Guard force supervisors delivering digital forensic investigation.
Executives responsible for approving investment in digital forensic investigation.
Facility and site managers accountable for protection of digital forensic investigation.
Operations managers whose activity is protected by digital forensic investigation.
Managers with direct responsibility for digital forensic investigation within the protected site.
Members of committees that take decisions affecting digital forensic investigation.
Course Modules
Digital forensic investigation: insider risk, vetting and personnel security
2 sessions · 8 pointsSession 1Making the investment case for digital forensic investigation
- Set escalation criteria and out-of-hours contacts for digital forensic investigation.
- Set escalation thresholds for digital forensic investigation that work out of hours.
- Confirm that contractual obligations around digital forensic investigation are understood.
- Review surveillance coverage for digital forensic investigation against likely approach routes.
Session 2The decisions in digital forensic investigation that cannot be delegated
- Confirm recorded material from digital forensic investigation is retained long enough to be useful.
- Prepare the response for the most likely failure in digital forensic investigation.
- Coordinate arrangements for digital forensic investigation with civil defence and police in advance.
- Define the first response actions for an incident involving digital forensic investigation.
Digital forensic investigation: layered controls — deter, detect, delay, respond
2 sessions · 8 pointsSession 1Access control on digital forensic investigation that people do not bypass
- Map the handovers in digital forensic investigation between functions and secure them.
- Supervise and spot-check performance on digital forensic investigation rather than relying on reports.
- Confirm that reporting on digital forensic investigation reaches the people who can act.
- Set the review interval for digital forensic investigation and who attends.
Session 2Surveillance on digital forensic investigation that supports an investigation later
- Name a single owner for each element of digital forensic investigation.
- Report on digital forensic investigation in terms that support an investment decision.
- Assess contractor and third-party exposure within digital forensic investigation.
- Remove steps in digital forensic investigation that add effort without adding assurance.
Digital forensic investigation: surveillance, monitoring and control rooms
2 sessions · 8 pointsSession 1Escalation and decision rights in digital forensic investigation
- Arrange the handover of digital forensic investigation so capability survives staff changes.
- Confirm access control on digital forensic investigation cannot be routinely bypassed.
- Establish evidence handling and chain of custody for digital forensic investigation.
- Establish what evidence demonstrates digital forensic investigation is under control.
Session 2Exercising the plan for digital forensic investigation realistically
- Check guard force instructions for digital forensic investigation are current and understood.
- Identify single points of dependency in digital forensic investigation and reduce them.
- Verify identity checks applied at entry points relevant to digital forensic investigation.
- Benchmark the organisation's digital forensic investigation against comparable operations.
Digital forensic investigation: incident response and escalation
2 sessions · 8 pointsSession 1Coordinating with external authorities on digital forensic investigation
- Check that records of digital forensic investigation answer the questions likely to be asked.
- Protect sensitive information relating to digital forensic investigation from casual disclosure.
- Check that controls on digital forensic investigation cover deterrence, detection, delay and response.
- Identify vulnerabilities in digital forensic investigation and rank them by consequence, not ease of fix.
Session 2Where digital forensic investigation typically breaks, and why
- Exercise the plan for digital forensic investigation under realistic conditions and record failures.
- Set out how exceptions to digital forensic investigation are requested and approved.
- Establish who is informed, consulted and accountable in digital forensic investigation.
- Compare the cost of digital forensic investigation with the cost of its absence.
Choose the package that suits you
Silver Package
At least 3 people
USD1,250
- Workshop or Program Participation
- Airport Transfers
- Customized Badge
- Expert Mentorship (Private Sessions)
- Supervision & Secretarial Services
- Accredited Certificate of Participation
- Complete Training Kit
- Coffee Break
- Closing Ceremony
Gold Package
At least 3 people
USD1,850
- 5-night stay in a 5-star hotel
- Workshop or Program Participation
- Airport Transfers
- Customized Badge
- Expert Mentorship (Private Sessions)
- Supervision & Secretarial Services
- Accredited Certificate of Participation
- Complete Training Kit
- Coffee Break
- Closing Ceremony
Complete your registration
We will contact you within one business day to confirm.