🔍 IACIS CFCE
(Certified Forensic Computer Examiner)

🧠 1. Certification Name and Issuing Body

• Full certification name: Certified Forensic Computer Examiner (CFCE)

• Issuing organization: IACIS – International Association of Computer Investigative Specialists

• Official website: https://www.iacis.com/certification/cfce-certification/

🧩 2. Certification Level and Type

• Level: Intermediate to Advanced

• Type: Technical (Digital Forensics / Court-Admissible Evidence)

📜 3. Purpose and Goals

• What skills does it certify?
  Ability to conduct computer forensic examinations in compliance with legal standards, properly acquire digital evidence, analyze it using forensic tools, and produce court-ready reports

• Target roles or profiles:
  Law Enforcement Examiner, Forensics Analyst, Legal Expert Witness, Corporate Investigator

• Practical applications:
  Preservation of evidence, forensic imaging, analysis of file systems, email, registry, logs, reporting and testifying in court

🎓 4. Prerequisites

• Recommended prior certifications:
  GSEC, Security+, or CHFI (not required, but helpful)

• Required experience:
  Experience in digital forensics or completion of the IACIS Basic Computer Forensic Examiner (BCFE) course

• Required technical knowledge:
  Disk structures, FAT/NTFS, forensic acquisition/imaging, chain of custody, investigative procedures

📚 5. Content and Curriculum

• Key domains/modules:

  1. Evidence Handling and Chain of Custody

  2. File Systems (FAT, NTFS)

  3. Email, Internet, and Communication Artifacts

  4. Registry and Log Analysis

  5. Imaging and Validation (Hashing, Write-blockers)

  6. Analysis of Hidden/Deleted Files

  7. Report Writing and Court Testimony

• Technologies/tools:
  EnCase, FTK, X-Ways, Autopsy, OSForensics, TSK, Write blockers, Disk imaging hardware/software

• Framework mapping:
  ISO/IEC 27037, SWGDE best practices, Daubert standard (U.S. admissibility in court), NIST SP 800-86

🧪 6. Learning Approach

• Style: Instructor-led with guided casework and a two-phase testing process

• Labs/environments: Included in BCFE training course

• Materials:

  • IACIS training manual

  • Case materials and mock evidence

  • CFCE peer-reviewed phase

• Recommended platforms: DFIR.training, CyberDefenders, SANS Workstations (for practice)

📝 7. Exam Format and Details

• Structure: Two-phase process

  1. Peer Review Phase: Completion of forensic exercises (practical + reporting)

  2. Certification Phase: Written exam and final practical

• Mode: In-person and remote-supported components

• Duration: ~3–6 months to complete

• Passing score: Not disclosed (requires full review by mentors)

• Languages: English

• Certification validity: 3 years

💰 8. Estimated Cost

• CFCE enrollment fee: ~$750 USD (members), ~$1,500 USD (non-members)

• Training course (optional BCFE): ~$2,000–$2,500 USD

• Renewal cost: ~$300–$400 USD + CPEs

🌍 9. Industry Recognition

• Demand/popularity: Very high in law enforcement and legal/judicial forensics

• Organizations that value it: Police departments, federal agencies, cybercrime units, law firms

• Comparison:

  • More legally oriented than GCFE/CHFI

  • Comparable in rigor to GCFE, more strict in legal defensibility

  • Not tool-specific, but often paired with EnCase/X-Ways

💼 10. Career Opportunities

• Job roles:
  Law Enforcement Examiner, Expert Witness, Digital Forensics Consultant, Internal Investigator

• Suggested paths:
  → Security+ / C)DFE → CFCE → GCFA / CCE / GCFE
  → CFCE + GCFE = Court-Level + Technical Deep Forensics

💵 11. Average Salary

• USA: $95,000–$125,000/year

• Europe: €65,000–€100,000/year

• Salary impact: High in law enforcement and legal DFIR roles

• (Sources: IACIS alumni, public salary data, DFIR job listings)

📅 12. Renewal and Maintenance

• Validity: 3 years

• Renewal options:

  • Submit 40 CPEs

  • Submit forensic casework log and documentation

  • Pay renewal fee (varies by membership)

🧭 13. Final Recommendations

• Ideal for:
  Digital forensic examiners needing court-admissible credentials or working in law enforcement/legal contexts

• When to pursue:
  After initial digital forensics experience and completion of IACIS BCFE or similar foundation

• Tips:
  Be prepared for a long and rigorous peer review. Document everything meticulously. Develop strong report-writing and investigative narrative skills.