UC2FPP10 Digital Forensics: Practice and Procedure

Start semesters

UC2FPP10 Digital Forensics: Practice and Procedure

Course description
- NQF Level
  Bachelor's degree (Level 6 1. Cycle)
- Area of Study
  Computing
- Program of Study
  Digital Forensics
- ECTS
  10
- Campus
  Kristiansand, OnlinePLUS - Oslo, Online
- Course Leader
  Iain Sutherland

Introduction

Language of Instruction and assessment: English
May be offered on Campus and Online.
May be offered as a separate course.

Included in the following bachelor's degrees:

Digital Forensics

Course Aim(s)

The course aims to introduce the investigation of crime and misuse involving digital systems. It will explore the practical issues associated with digital crime / misuse investigation, equipping students with the knowledge required to plan and determine the appropriate strategies to conduct a successful digital investigation. Students will examine best practice in relation to legal and regulatory requirements for evidence collection and documentation.

Course Learning Outcomes

Knowledge

The student has knowledge of

K1	the investigation process from seizure to prosecution.
K2	the tools that can be used as part of an investigation.
K3	contemporaneous notes and crime scene documentation.

Skills

The student gain skills in

S1	be able to process, store and present evidence.
S2	process a digital crime scene.

General Competence

The student can demonstrate

G1	impartiality and an ability to follow appropriate guidelines as part of an investigation.
G2	crime scene importance as part of a digital examination.

Course Topics

Investigative Mindset
Best Practices, Procedures and Forensic Concepts

Teaching Methods

Teaching will be based on a hybrid-flexible approach. Instructor-led face-to-face learning is combined with online learning in a flexible course structure that gives students the option of attending sessions in the classroom, participating online, or doing both.
All activities require active student participation in their own learning.
Learning delivery methods and available resources will be selected to ensure constructive alignment with course content, learning outcomes and assessment criteria.
Students will be taught using a mixture of guidance, self-study, and lecture material. Topics will be introduced in a series of weekly lectures. The guidance sessions will be directed practical exercises and reading in which students can explore topics with support from a teacher. This material will also require students to self-manage their time to ensure tasks are completed and the theory is fully understood. This will allow the students to fully engage with lectures and with their peers.

Resources and Equipment

Learning resources are available in the LMS and include, but is not limited to:
- literature and online reading material (essential and recommended)
- streams, recordings and other digital resources, where applicable
- video conferencing and communication platforms, if applicable
- tools, software and libraries, where applicable
Students must have access to an internet connection, and suitable hardware.
- Accessing live streams and virtual laboratories requires a minimum broadband connection of 2Mbps (4Mbps recommended).
Students working on their own laptop/computer are required to acquire appropriate communications software, e.g., webcam, microphone, headphones.

Prerequisite Knowledge

UC1IIS05 Introduction to Information Security, or equivalent course(s).

Reading List

The reading list for this course and any additional electronic resources will be provided in the LMS.

Study Workload

250 nominal hours.
Study workload applies to both Campus and Online students.

Activity	Duration
Teacher-led activity	24 Hour(s)
Teacher-supported work	48 Hour(s)
Self-study	178 Hour(s)

Work Requirements

Mandatory Assignments are assessed as Approved or Not Approved.

Name	Requirement	Scope	Requirement type	Comment
Mandatory Assignment			Course requirement

Assessment Strategy

All mandatory assignments must be passed in order to attempt the exam.
This course has two (2) exams contributing towards the overall and final grade of the course.

All exams must be assessed as passed to receive the final Course Grade.

Form of assessment	Grading scale	Grouping	Duration of assessment
Report	A-F
Report	A-F