Computer Forensics Lab Certification Requirements
Computer forensic labs can voluntarily seek accreditation from the American Society of Crime Laboratory Directors/Laboratory Crediting Board (ASCLD/LAB). Labs receiving accreditation from this body have demonstrated quality assurance and control; qualified and competent scientists; qualified scientific testing procedures; and outside proficiency testing. Labs can seek accreditation on any of eight disciplines. Computer forensics is considered a sub-discipline of digital evidence. Labs that receive accreditation from ASCLD/LAB have confirmed they are committed to quality.
Other People Are Reading
-
History
-
In 1998, the Scientific Working Group on Digital Evidence (SWGDE) was established with one objective: to bring together the federal agencies engaged in the analysis of digital media. Representatives from agencies such as the Illinois State Police Crime Laboratories and the Florida Department of Law Enforcement were also invited to participate in SWGDE meetings. SWGDE eventually created the discipline of digital evidence, which comprises the sub-disciplines of computer forensics, audio analysis, video analysis and imaging analysis. SWGDE began to work closely with the American Society of Crime Laboratory Directors/Laboratory Crediting Board (ASCLD/LAB) in 2000. In 2003, ASCLD approved the addition of the digital evidence discipline to the ASCLD/LAB accreditation program.
Facts
-
ASCLD/LAB is the body that accredits computer forensic laboratories. ASCLD/LAB has two accreditation programs. The ASCLD/LAB Legacy program is the original laboratory accreditation program that has been used since 1982. The ASCLD/LAB International program was effective starting April 1, 2004. Both programs will accredit a lab for the areas of biology or DNA, controlled substances, crime scenes, digital evidence, firearms and toolmarks, latent prints, questioned documents, toxicology and trace evidence. Digital evidence has four sub-disciplines: computer forensics, audio analysis, video analysis and imaging analysis. Accreditation is voluntary for both programs.
-
Misconception
-
ASCLD/LAB accreditation is different from examiner certification. Once a lab has met the requirements set forth by ASCLD/LAB it is accredited, yet the individual examiners are not certified. Examiners are expected to meet specific education, training and testing requirements; however, they are not certified under either of the ASCLD/LAB programs. Almost all the programs' accredited laboratories will self-certify examiners in the disciplines under their accreditation criteria, including computer forensics.
Requirements
-
Labs seeking accreditation by ASCLD/LAB must be able to demonstrate quality assurance and control, qualified and competent scientists, qualified scientific testing procedures, and outside proficiency testing. Labs that have been accredited for the digital evidence discipline have shown acceptable conformance for the following criteria: marking, sealing and protection of physical evidence; validation/verification of procedures; the use of appropriate standards and of controls; proper working order for forensic computers; and the calibration of instruments.
Considerations
-
Evidence is not defined by ASCLD/LAB. Each laboratory must define evidence and how it should be packaged and secured within their evidence-handling and physical-security policies. What is considered evidence and what is considered a container is not always obvious within the computer forensics sub-discipline. The Federal Rules of Evidence, Article X, rules 1001-1004, provide guidance on what could be considered evidence. The Federal Rules of Evidence can be found at the U.S. Courts website included in the resources.
-
