-NOT PROTECTIVELY MARKED- NOTTINGHAMSHIRE POLICE JOB DESCRIPTION Job title: Digital Investigations Technician (Police Staff) Department/Location: Responsible to: Detective Sergeant (Digital Investigations Unit) Responsible for: Digital Investigations Date: Library no./HMIC classification: JOB PURPOSE To assist in conducting the forensic examination of digital devices for evidence in support of criminal investigations. To provide technical support to other investigators in order to give the Force an effective response to the investigation of all crimes that contain a hi-tech element. PRINCIPAL ACCOUNTABILITIES 1. Arrange delivery and collection of evidential items in liaison with officers and station assistants. Record the movement of evidential items into and from the department, to ensure proper continuity of evidence. 2. Conduct physical examinations of items submitted for examination, disassemble, carry out forensic acquisition of data in accordance with best practice and national guidelines, and reassemble. Record all processes accurately and contemporaneously, in written format or electronically, and also by photography. Conduct preliminary forensic processing of acquired data, for example identifying drive letters from Mounted Device registry entries, mounting and carving or designated file types, indexing of cases, identification of encrypted material, and BIOS and time zone checks. Record contemporaneously all forensic processes and present in a report for the Digital Evidence examiner. Assist in the management and maintenance of the unit’s forensic computer network, and attached devices. Manage and maintain stock levels of consumable equipment, particularly hard drives, maintain an inventory and tracking of individual assets. Provide advice and guidance to police officers who are planning searches of premises where digital devices are known or believed to be present. To train and mentor any undergraduate student placement who is acting as assistant to your post. To participate in the Force PDR process and take responsibility for identifying your own professional and career development needs. 3. 4. 5. 6. 7. 8. 9. Page 1 of 4 Not Protectively Marked -NOT PROTECTIVELY MARKED- DIMENSIONS Financial: N/A Staff: N/A Sphere of activity: The post holder will be responsible as part of the Digital Investigations Unit for the provision of a service for the forensic recovery of evidence from digital devices for the Force. The post holder will manage the movement of evidential items for the department. The post holder will conduct physical examination of digital devices, acquire forensic images of the items submitted for examination and then undertake a preliminary forensic investigation. Other: N/A ORGANISATIONAL/DEPARTMENTAL CHART ACCOUNTABILITY Prepared by – (Post) Signature Date NOTTINGHAMSHIRE POLICE Page 2 of 4 Not Protectively Marked -NOT PROTECTIVELY MARKED- PERSON SPECIFICATION Job Title: Digital Investigations Technician (Police Staff) Department: Digital Investigations Unit Date: Library no: CRITERIA METHOD OF ASSESSMENT KNOWLEDGE AND EXPERIENCE Knowledge of and experience in, the use of Microsoft DOS and windows operating systems, and an understanding of other common operating systems. Interview/ Shortlisting Knowledge of and experience in the main public uses of the Interview Internet – http, ftp, nntp, smtp, pop, irc, & peer to peer networking. An advanced understanding of the structure and operation of both Local Area Networks and the Internet. An in depth knowledge of PC architecture, its hardware components and how they interact, connectivity and networking. The ability to disassemble and reassemble digital devices and trouble shoot faults. A basic understanding of legislation in relation to Hi-Tech Crime, including, Computer Misuse, Indecent Photographs of Children, Reprogramming Act and Data Protection issues. An advanced knowledge and understanding of file structures. The post holder will be required to be able to transfer hard drives between systems and to utilize the software tools required to prepare a hard drive for use, to load an operating system onto it and to install it into a system. Interview/ Shortlisting Interview Interview SKILLS AND ABILITIES A commitment to a continual personal development of knowledge of digital technology, both hardware and software. Excellent oral and written communication skills with the ability to interact effectively with persons at all levels of technical knowledge, both within and outside the police service. Interview A proven record of discretion and integrity. Interview/Vetting Unit Page 3 of 4 Not Protectively Marked Interview -NOT PROTECTIVELY MARKED- Proven ability to work in a small close-knit team. Interview Able to work within strict procedures and protocols but with the initiative and imagination to identify and recommend improvements. Interview Attention to detail with a methodical and painstaking approach to problem solving. Interview EDUCATION/QUALIFICATION Degree (or equivalent) in information and communication technology, or equivalent technical experience in fields such as digital forensics, electronics, or mobile telecommunication networks. Application/ Interview Must be prepared, willing and able to arrange own travel throughout the County. Application Form Must be willing to attend required training courses and attachments. Application Form OTHER An understanding of and a commitment to Equal Opportunities. A commitment to proving a quality service internally and externally to improve Police/Community relations and trust. Interview A willingness to undergo Mandatory Counselling in accordance with the eCrime Unit Counselling Policy. Interview The post holder will be checked to Management Vetting (MV) and Security Checks (SC) levels. Vetting Unit ACCOUNTABILITY Prepared by (Post) Signature ___________________________________Date: Page 4 of 4 Not Protectively Marked