IACIS offers the CFCE certification program to prospective candidates who wish to attain the CFCE certification. Students who successfully complete the BCFE course are automatically entered into the program.
IACIS has a well-defined certification policy. We highly encourage you to read this policy.
The IACIS membership fee is waived with the purchase of the certification process.
You can apply for, and purchase an IACIS Certification on our Purchase Certification page.
CFCE 2-Phase Program
The CFCE certification program is comprised of two phases. Both phases are required to be completed to become CFCE certified.
1. CFCE Peer Review Phase
Peer Review Chairman: Thomas Reinert
In the Peer Review phase, candidates complete four scenario-based problems guided by a forensic professional through a mentored process whereby candidates are able to submit reports or assessment documents after completing each practical exercise.
The Peer Review phase consists of the following elements:
- Four (4) scenario-based practical problems
- 30 days to complete each problem
- A coach is assigned to guide you through the problem’s learning points
- Must pass all four problems to be eligible to enter the certification phase
2. CFCE Certification Phase
CFCE Certification Chairman: Craig MacFarlane
In the Certification Phase the candidate must complete a practical exercise and written final examination. Upon successful completion, the candidate will be awarded the Certified Forensic Computer Examiner (CFCE) certification.
The Certification Phase consists of the following elements:
- Hard drive practical problem – 30 days to complete
- Knowledge based objective test – 14 days to complete
Entry into the Certification Phase is automatic once the Peer Review phase has been completed. The candidate will have 7 days to begin the hard drive practical problem and 30 days to complete it. Seven days after the peer review phase has been completed, whether the candidate logs in or not, the 44 day clock will begin.
The candidate will then go directly into the Knowledge Based test, which consists of 100 general digital forensic knowledge questions. The written exam consists of questions composed of true/false, multiple-choice, matching, and short essay (fill in the blank) questions. Candidates must obtain a minimum score of 80% on the exam and practical to pass. Failure to achieve the requisite score will result in failure, and the CFCE certification will not be awarded.
Additional Details
CFCE Certification Finalization
Once both phases have been successfully completed, candidates will be required to complete a notarized form declaring that the practical examination and written examination were completed without assistance from anyone. The form must be completed and returned to the CFCE Certification Chairman (or designee) prior to issuance of the CFCE certification. The first and last name and certification ID number of each certified CFCE member will be listed on the IACIS public website.
Upon successful completion of the CFCE program in its entirety, IACIS will provide the successful candidate with a framed CFCE certificate at no expense to the candidate.
External CFCE Candidates
For those wishing to attempt the CFCE without attendance at the BCFE training, we offer an External Certification process. The External CFCE process is offered twice a year, in March and September. The external process provides you the same testing experience as BCFE attendees, including separate Peer Review and Certification phases as described on the CFCE Certification page. Although external candidates do not receive the BCFE training manual, they are provided with a comprehensive study guide.
Registration for External CFCE will open for purchase on or about June 1st (for the September cycle) and December 1st (for the March cycle) of each year. The fee for the external certification is currently $800.00 US.
Prerequisites: At the time of registration, Candidates must submit proof of 72 hours of training that aligns with the CFCE core competencies.. If the application is not approved, Candidates have 5 days to send additional documentation. If the additional documentation is not received within the time frame stated, the application is assumed to have been abandoned and it will be removed. Candidates may be required to show proof in the form of training certificates.
The option to purchase the External CFCE will only be available during the open periods, listed under Purchase Products. Once approved, payment is due within 30 days or at the registration deadline, whichever is sooner.
CFCE Program Confidentiality and Ethics
Candidates enrolled in the Peer Review phase are prohibited from discussing any matters related to the Peer Review phase with anyone other than their assigned coach, regional manager, division administrator, Peer Review Chairman, or Director of Certification. Candidates enrolled in the Certification Phase are prohibited from discussing any matters related to the Certification Phase with anyone other than the CFCE Certification Chairman or Director of Certification. Violation of this clause may result in the candidate’s immediate dismissal from the certification program.
Cheating, plagiarism, egregious policy violations, or unethical conduct will result in immediate dismissal from the certification program and will be referred to the Ethics Committee for possible revocation of IACIS endorsed certifications.
CFCE Recertification
Each certified CFCE member must satisfy recertification requirements every three years. IACIS offers proficiency tests on a regular basis for organizations or laboratories that require frequent proficiency tests. Likewise, proficiency tests are offered to certified CFCE members in the third year from the initial date of certification for the sole purpose of recertification. Please review our CFCE Recertification page for more detailed info.
Expired CFCE Recertification
IACIS requires each CFCE certificant to satisfactorily recertify every three years. If the certificant fails to recertify during the third year from the date of initial certification or last recertification, the certificant’s certification will be classified as expired. If the CFCE certification is expired less than three calendar years from the date of the original expiration, the expired CFCE candidate may complete the CFCE Certification Phase to reobtain their CFCE certification. The Certification Phase is an independent exercise wherein the candidate must complete a practical exercise and written final examination which is based on the current CFCE Core Competencies .
For example, a member whose CFCE expired December 31st, 2020 would be allowed to re-earn their CFCE up to the year 2023. After 2023 the member would be required to complete the entire CFCE Certification process either through attendance at a BCFE event or as an External Candidate.
The Recertification Period is open from February 1st through December 31st of every year. Registration will close on December 15th.
EXPIRED RECERTIFICATION REQUIREMENTS
All requirements must be met at the time of application to recertify:
- The CFCE certification must be expired less than three calendar years from the date of the original expiration.
- The candidate must have 72 hours of computer forensics training in the previous three years, prior to the date of application that matches the current IACIS core competencies.
- The candidate must affirm to uphold the IACIS Code of Ethics and Professional Conduct at the time of application.
- Certification candidates whose CFCE certification expired may attempt to regain the certification upon approval and pay the “expired certification fee(s)” as set forth by the Director of Certification.
- A candidate whose CFCE certification expired less than three calendar years from the date of the original expiration may take the Certification Phase with the same expectations as other candidates going through the process.
Expired CFCE Recertification fee: $350
CFCE Certification F.A.Q.
What if a candidate fails an exam?
Candidates failing either the practical examination or written final examination will not be re-examined immediately. The candidate can re-take the practical or final written exam in the next certification cycle. IACIS will allow each candidate to be re-examined one time without charge (practical or final examination). Failure of both parts in the Certification Phase will be a failure of the process. Candidates only get to take one of the two over. The requisite fee for any subsequent re-examination will be based on the fee schedule approved by the Board of Directors and posted on the IACIS website.
Can I use the CFCE logo?
Only a current CFCE certificant is permitted to identify themselves as being a Certified Forensic Computer Examiner or use the CFCE logo.
