Digital Technologies for Investigators

Description

The cyber environment has no borders and offers easy anonymity and methods of concealment for criminal actors. It also provides new tools to engage in a range of different criminal activities. For these reasons, this course is designed to assist investigators in solving crimes that involve digital evidence. To start off, course participants first learn about the structure and operation of a computer, networks, and the Internet. With this foundation, participants then learn how to locate and document digital evidence of criminal activity, how to lawfully access and preserve data from a computer system, and how a lawful search and seizure is conducted at a crime scene specific to digital evidence and digital technologies. Lastly, participants learn the legal considerations regarding digital technology investigations, including new and current related case law, and how to use effective wording in search warrants with respect to digital technology.

Format and delivery

Length of course

25 hours online, followed by 5 days in class, as follows:

• Part 1: 25 hours (approximately) of self-paced, online pre-course learning
• Part 2: 5 days of classroom learning

Class size

maximum 20 participants for Part 2

Delivery setting

• Part 1: Delivered online in the digital learning platform (i.e., CPC eCampus)
• Part 2: Delivered in-person in a computer classroom

Learning outcomes

• Describe the structure and operation of a computer, networks and the Internet
• Express current means of digital communications, what evidence this can afford, and how to obtain this evidence
• State the digital technologies in current use in Canada
• Locate and document digital evidence of criminal activity
• Summarize the legal considerations inherent to digital technology investigations
• Recall recent and applicable computer-related case law and employ this to produce effective wording in search warrants
• Explain how to lawfully access and preserve data from a computer or digital device
• Demonstrate the lawful search and seizure of potential digital evidence from a crime scene

Eligibility and mandatory requirements

• This course is offered to investigators, law enforcement and government employees from federal, provincial, and municipal agencies or departments that have a role in public safety
• Priority will be given to registrants which already belong to a cybercrime unit or child exploitation unit
• Registrants should be comfortable doing the following on a Windows-based computer:
  • use programs for emailing, word processing, web browsing, and personalizing their interface screens
  • manage files and folders via Windows Explorer (that is, create, copy, move and delete files or folders)
  • download and install programs from the Internet
  • troubleshoot and problem solve at a basic level
• Acceptance or refusal in the course is at the discretion of the Canadian Police College
• The online component (Part 1) must be completed before you can be registered into one of the in-class sessions.
  • Once the online component (Part 1) has been completed, it is the responsibility of the participant or their training coordinator to contact the Registrar's office to apply for an in-class session

Assessment

• Success in the course is based on attendance and participation in the classroom and successful completion of all required assignments and learning evaluations
• Various evaluation methods will be used
• The online component (Part 1) will include evaluation of content
• The 5-day in-class component (Part 2) will begin with a graded exam based on the material learned in the online component (Part 1). The participant must pass this exam to continue with the course
• Re-testing or re-evaluation is conducted in accordance with the CPC Academic Directives and at the discretion of the Canadian Police College

Contact

For more details or other information about the course, please email cpc_registrar-registraire_ccp@rcmp-grc.gc.ca.

Date modified:

2026-09-02