Exam 50% - length 2 hours - testing Learning outcomes 1,2 & 3
Task based assignments 50% testing Learning outcomes 3 and 4.

Introduction to Information Technology Law, 6th Edition, Bainbridge, D., 2004, Pearson Longman, ISBN 978140584666-0

Prosise, C., & Mandia, K., (2003), Incident Response and Computer Forensics, Osborne McGraw Hill, ISBN: 007222696-X

Stephenson, P., Investigating Computer Related Crime, CRC Press, 2000, ISBN: 084932218-9

Ethics & Technology, Ethical Issues in an Age of Information and Communications Technology, 2nd Edition, Tavani, H. T., Wiley, ISBN 047199803-6

A Guide to Forensic Testimony, F.C. Smith & R.G. Bace

Good Practice Guide for Computer Based Evidence. Association of Chief Police Officers (ACPO) of England, Wales and Northern Ireland.
http://www.7safe.com/electronic_evidence/ACPO_guidelines_computer_evidence.pdf

Prior study of EITHER CE01097-5, Cybercrime Forensic Analysis or equivalent, OR CE01098-5, Forensic Data Recovery or equivalent AND prior study of CE00315-5, Professional and Enterprise Development or equivalent.

Isolated Forensic Analysis Lab
Forensic Toolsets e.g. EnCase, FTK, XRY
Sanitised cases accumulated by the Faculty
Net analysis or similar software

Practical tasks and tutorials will be used to re-enforce and apply theory to encourage an analytical and problem based approach. Observance of legal, social and ethical issues will need to be demonstrated throughout. 18 lecture hours and 6 tutorial hours.

Legal context and structures.
Forensic laboratroy set up.
Digital evidence controls.
Processing crime and incident scenes.
Writing investigation reports.
Expert testimony.
Data recovery
Forensic investigation and evidence handling
Includes international aspects of digital forensics, especially different legal environments and issues with cross national forensic response.