Middle East Cybercrime ForumBeirut 23rd – 24th February 2006

Harmonising Cybercrime Training Across International Borders

Developing a cybercrime training strategyThe UK example

The EU Agis Programme Developing and delivering an international training programme

Nigel Jones – Chair Interpol Working Party on IT Crime (Europe)Head of High Tech Crime Training NCPE Specialist Training Wyboston, EnglandTel: +44 (0)1480 401829Email: nigel.jones@nh2tc.orgWeb: www.centrex.police.uk/hightechcrime

Developing a Cybercrime Training Strategy

The UK Example

UK High Tech Crime Training Programme

Aim:To design, develop and deliver anacademically and professionally

accredited modular high tech crime training programme for

the police service.

Linked to ACPO National High Tech Crime StrategySupports Home Office E-Crime Strategy

Training Support

ChrisHatfield

Course Managers

Paul Bayer

NeilWilliams

Jim Stark

TrainingCo-ordinator

SusieWoodman

CorrinaChester

Tracey Stevens

Technical Support

GregPember

MichaelOgunseye

IreneButterwick

Mark Cameron

KevinMansell

Head of High Tech Crime Training

Deputy Head of High Tech Crime Training

Bill Crane

Legal Researcher

Nigel Jones

Computer Crime?IT Crime?

Cyber Crime?

Internet Crime?High-Tech Crime?Technology Crime?

CRIMETheft

DeceptionHarassment

Identity Theft

Murder

IncitementTerrorism

Narcotics

Child Abuse

Fraud

Racism

Robbery

What do we mean by Cybercrime

How IT Impacts on Crime

Technology as: a target of crime an aid to crime a witness to crime a communications tool a storage medium

All Police Officers – Introductory Level for Digital Evidence

AdvancedLevel

for IT CrimeSpecialists

Covert Internet Investigators

Introductory Level Forensic IT Analysts & Network Investigators

All Investigators and Managers

Child Protection and Economic Crime Investigators Internet Researchers

CybercrimeTraining Structure

Audience Volume

Kn

ow

led

ge

Lev

el

An e-learning module for all

1st Responder E-learningBased on module for new recruits introduced in 2003

Introductory training to reach the entire police service

Six Chapters

Students are assessed at each stage

Can be taken at any computer

Pre requisite for a number of our courses

What does it look like?

National Occupational StandardsE-Crime

Developed by Skills for Justice

Provides standard skill sets to be achieved

Cross discipline = public and private sector

Covers: e-crime investigators

IT Forensics

Supported by the UK Police Service

Will apply to all police officers

Eight standards dealing with:Identifying and securing, seizing and recording electronic evidence (EC1 + EC2)

Capturing and preserving electronic evidence (EC3)

Investigating electronic evidence (EC4)

Evaluating and reporting electronic evidence (EC5)

Conducting Internet investigations (EC6)

Conducting Network investigations (EC7)

Conducting Covert Internet investigations (EC8

National Occupational StandardsE-Crime

www.skillsforjustice.com

MSc in Cybercrime ForensicsOffered by Canterbury Christchurch UniversityRoute to qualification for forensic analysts and network investigatorsInitially delivered at Wyboston for L E and .gov staffDuration – Part time – min 2 years – max 4 yearsThis is a taught Level HE4 extension programme.

Entry requirements:Applicants will typically be at the level of a good honours degree or equivalent. Students who do not possess a degree, but can show the abilities that would meet learning outcomes similar to a degree would be able to enter the programme:

Significant professional experience Professional experience plus lower level qualificationsProfessional experience plus IT/Cybercrime technical courses

The EU Agis Programme

Developing and Delivering an

International Training Programme

Agis EU Training Initiative

2 year project now completedDelivered introductory level IT Forensics and Network Investigators course to 60 students from EU and candidate countries

Translated into Spanish, German and Turkish

All training material made available to LE worldwide.Created a network of (9) LE cybercrime training centres

Interpol to deliver 4 introductory courses in next 12 months

New project begins in November led by An Garda SiochanaWill deliver 3 intermediate level courses for same audience

All material to be made available at end of project

New bid submitted in Jan 2006Contributory partners (Microsoft)

If successful will deliver a further 3 intermediate level courses

Report on Courses60 Students from 27 EU and Candidate Countries (not Belgium) and Norway, Switzerland and Interpol

Course 3 had many changes from course 1 based on feedback from students and trainers

Evaluation at time of course and post course

Course evaluation – total of 8,261 questions answered by students at level 1

50% return rate on post course evaluation (level 3)

Agis October 2004 Total Positive vs Negative returns

95%

5%

Ne ga tiv e Re turns

Po s itiv e Re turns

Agis October 2004 – Positive vs Negative Returns

1566 Questions in Total – 1491 Positive – 75 Negative

Agis – The current partners

Austria Bulgaria France

Germany Ireland x 2

Portugal Spain

Interpol

UnitedKingdom x 2

Netherlands

Malta

Europol

Latvia

Belgium

Greece

Finland

Law enforcement personnel at all levels, prosecutors and the judiciary must be trained and equipped to address high-tech crimes.

Cybercrime training should be harmonised and accredited by academic and/or professional bodies on a national and international level

Aims, objectives and learning outcomes for each level of training should be agreed internationally

Cybercrime training organisations should work together to develop training products, share trainers and training material to avoid duplication of effort.

Countries with cybercrime training institutes should engage in coordinated outreach activity to deliver cybercrime training to other countries.

Conclusions

Middle East Cybercrime ForumBeirut 23rd – 24th February 2006

Harmonising Cybercrime Training Across International Borders

Nigel Jones – Chair Interpol Working Party on IT Crime (Europe)Head of High Tech Crime Training NCPE Specialist Training Wyboston, EnglandTel: +44 (0)1480 401829Email: nigel.jones@nh2tc.orgWeb: www.centrex.police.uk/hightechcrime

Thank you for your attention