Job title: Digital Forensic Technician Grade: SCALE 6 Role code: END1229 Status: Police Staff
Main purpose of the role:
Utilise a range of specialised software and other techniques to secure and retrieve data in a legally admissible way from digital devices linked to crime, whilst working to relevant ISO accreditations, national guidelines, and legislation reporting results, producing Criminal Justice Act statements and exhibits as and when required to a standard suitable for use in criminal prosecutions and court proceedings.
Provide advice, guidance to local officers and staff on all aspects of proportionate and justified seizure, preservation, and retrieval of data from digital devices, and appropriate lines of enquiry.
Secure and retrieve data from digital devices, including mobile phones, CCTV systems, computers, and undertake editing of audio evidence, in accordance with standard operating procedures using automated processes where required in order to support police investigations.
Utilise streamlined, targeted extraction techniques, or triage capability of seized digital devices to enable a timelier initial investigation and faster charging decisions.
Process recovered data in accordance with standard operating procedures, including data which could be of a sensitive and graphic nature to transfer the information into a viewable format for further investigation and disclosure purposes.
Report results and provide statements in relation to recovered information, ensuring continuity, integrity, limits and reliability f methods and material, together with any supporting technical information. When required, attend court as necessary.
Utilise the Forensics Case Management System to manage casework ensuring the information is accurate, up to date and available to enable statistical information and reports to be produced on a regular basis to support performance review, workload, and resource management.
Undertake routine administrative tasks, including the handling, logging, and tracking of exhibits to ensure that they are stored securely to maintain the continuity and recording of the physical evidence.
Develop and maintain competence under ISO requirements sustaining an up-to-date technical knowledge of both general and Digital forensic procedures, and advancements within the Digital Forensic field.
Created March 2023.
The post holder will be educated to A level standard or equivalent. Experience of working in a digital arena and experience of working in a policing environment familiar with case action plans would be desirable.
The post holder will be provided with the training required to become proficient in the understanding of digital technologies and how to harvest the data contained within it. They must be able to advise and guide across a range of digital disciplines including but not limited to mobile phones, computer, and CCTV forensics. They will become competent under ISO 17025 and maintain an office environment that meets this accreditation standard.
The post holder will need to provide evidence of their understanding and aptitude to utilise available evidence in relation to digital evidence requirements.
The post holder will gain knowledge of relevant legislation including: Regulation od Investigatory Powers Act, Data Protection and Criminal Procedures and Investigations Act (CPIA) legislation to provide the re uired advice and guidance. They will also need to keep abreast of changing technologies and be prepared to undergo continuous professional development.
This role requires effective problem solving, interpersonal, communication and influencing skills, together with strong customer focus. The post holder will be a self-motivated, and organised individual with the capability of prioritising competing demands with minimal supervision. The post holder will work a 7-day working shift pattern.
The Digital Forensic Technician is allocated a mentor and will complete a Professional Development Portfolio alongside their training to evidence necessary competence in the role.
Analyse Critically (Level 1)
I recognise the need to think critically about issues. I value the use of analysis and testing in policing. I take in information quickly and accurately. I am able to separate information and decide whether it is irrelevant or relevant and its importance. I solve problems proactively by understanding the reasons behind them, using learning from evidence and my experiences to take action. I refer to procedures and precedents as necessary before making decisions. I weigh up the pros and cons of possible actions, thinking about potential risks and using this thinking to inform our decisions. I recognise gaps and inconsistencies in information and think about the potential implications. I make decisions in alignment with our mission, values and the Code of Ethics.
Collaborative (Level 1)
I work cooperatively with others to get things done, willingly giving help and support to colleagues. I am approachable, and explain things well so that I generate a common understanding. I take the time to get to know others and their perspective in order to build rapport. I treat people with respect as individuals and address their specific needs and concerns. I am open and transparent in my relationships with others. I ensure I am clear and appropriate in my communications.
Deliver, Support and Inspire (Level 1)
I take on challenging tasks to help to improve the service continuously and support my colleagues. I understand how my work contributes to the wider police service. I understand it is part of my collective responsibility to deliver efficient services. I take personal responsibility for making sure that I am working effectively to deliver the best service, both individually and with others. I am conscientious in my approach, working hard to provide the best service and to overcome any obstacles that could prevent or hinder delivery. I support the efficient use of resources to create the most value and to deliver the right impact. I keep up to date with changes in internal and external environments. I am a role model for the behaviours I expect to see in others and I act in the best interests of the public and the police service.
Emotionally Aware (Level 1)
I treat others with respect, tolerance and compassion. I acknowledge and respect a range of different perspectives, values and beliefs within the remit of the law. I remain calm and think about how to best manage the situation when faced with provocation. I understand my own emotions and I know which situations might affect my ability to deal with stress and pressure. I ask for help and support when I need it. I understand the value that diversity offers. I communicate in clear and simple language so that I can be easily understood by others. I seek to understand the thoughts and concerns of others even when they are unable to express themselves clearly.
Innovative and Open-minded (Level 1)
I demonstrate an openness to changing ideas, perceptions and ways of working. I share suggestions with colleagues, speaking up to help improve existing working methods and practices. I constantly reflect on my own way of working and periodically review processes and procedures for continuous improvements. I adapt to change and am flexible as the need arises while encouraging others to do the same. I learn from my experiences and do not let myself be unduly influenced by preconceptions.
Take Ownership (Level 1)
I actively identify and respond to problems. I approach tasks with enthusiasm, focusing on public service excellence. I regularly seek feedback to understand the quality of my work and the impact of my behaviour. I recognise where I can help others and willingly take on additional tasks to support them, where appropriate. I give feedback to others that I make sure is understandable and constructive. I take responsibility for my own actions, I fulfil my promises and do what I say I will. I will admit if I have made a mistake and take action to rectify this. I demonstrate pride in representing the police service. I understand my own strengths and areas for development and take responsibility for my own learning to address gaps.
I take into account individual needs and requirements in all of my actions. I understand that treating everyone fairly does not mean everyone is treated the same. I always give people an equal opportunity to express their views. I communicate with everyone, making sure the most relevant message is provided to all. I value everyone's views and opinions by actively listening to understand their perspective. I make fair and objective decisions using the best available evidence. I enable everyone to have equal access to services and information, where appropriate.
I always act in line with the values of the police service and the Code of Ethics for the benefit of the public. I demonstrate courage in doing the right thing, even in challenging situations. I enhance the reputation of my organisation and the wider police service through my actions and behaviours. I challenge colleagues whose behaviour, attitude and language falls below the public's and the service's expectations. I am open and responsive to challenge about my actions and words. I declare any conflicts of interest at the earliest opportunity. I am respectful of the authority and influence my position gives me. I use resources effectively and efficiently and not for personal benefit.
Public Service (Accredited)
I act in the interest of the public, first and foremost. I am motivated by serving the public, ensuring that I provide the best service possible at all times. I seek to understand the needs of others to act in their best interests. I adapt to address the needs and concerns of different communities. I tailor my communication to be appropriate and respectful to my audience. I take into consideration how others want to be treated when interacting with them. I treat people respectfully regardless of the circumstances. I share credit with everyone involved in delivering services.
I ensure that my decision-making rationale is clear and considered so that it is easily understood by others. I am clear and comprehensive when communicating with others. I am open and honest about my areas for development and I strive to improve. I give an accurate representation of my actions and records. I recognise the value of feedback and act on it. I give constructive and accurate feedback. I represent the opinions of others accurately and consistently. I am consistent and truthful in my communications. I maintain confidentiality appropriately.
Computer/Telephone Evidence Recovery (Level 3)
Has an appreciation of the component parts of a computer and/or telephone and how those parts physically and electronically interact. Understands the basic operation of computers and / or telephones. Is aware of electrical safety issues. Understands power on and boot sequences and is able to achieve these without incurring data contamination. Has sufficient knowledge of DOS and Windows, together with an understanding of system configuration, to enable effective recovery of evidence from computers.
Crime Investigation (Level 4)
Able to recognise potential conflicts of interest between solicitors and suspects. Effectively plans and prepares work in order to progress investigatons. Analyses results obtained from interviews etc., in order to identify further offences, offenders and lines of enquiry. Has a comprehensive understanding of identification policies, procedures and their applications. Submits high quality reports and case files within time limits. Has an appreciation of the operating practices of the intelligence unit.
Digital Crime (Level 4)
Able to secure digital evidence from devices through application of specialist training. Able to analyse and interpret data and identify ongoing opportunities for further evidence gathering. Has a comprehensive understanding of the way that digital evidence is recorded, stored and processed and how this can be used to identify the user of the data in an evidential format. Understands both policy and law concerning the handling and attribution of digital evidence.
Health and Safety (Level 4)
Has received Supervisor training and takes responsibility for the safety of directly subordinate staff and visitors. Understands the procedures in place for the safe storage of hazardous substances, fire precautions and evacuation. Resolves hazards or problems identified within roles or work environments. Undertakes skills passport assessments for new and existing staff. Re-assesses passport as and when new equipment/technology is introduced. Completes annual reviews of skills passports, training needs analysis.
Information Management and Technology (Level 5)
Can retrieve information from computer searches across data source boundaries e.g. across a number of data sources, across county. Can analyse and compare data from such searches. Understands significance of findings and can provide guidance on the reliability of forecasts resulting from data analysis. Can monitor data quality in the work of others, and may manage the impact of data quality issues.
Internal Consultancy (Level 4)
Demonstrates an in depth knowledge of the relevant specialist area and combines this with high level consultancy skills. Develops collaborative relationships with internal clients and works with them to achieve joint objectives and targets. Maintains an up to date awareness of all developments which may affect Force business and policies and proactively advises clients of all relevant matters.
Knowledge of Police Environment and Policy (Level 4)
Displays a general appreciation of changes affecting the police service. Understands the inter-relationships between the roles of the various Operational and Support activities, and how organisation structures and police systems work. Possesses a detailed understanding of working procedures, practices and policies relevant to the current role and the roles of subordinates and ensures that these are followed at all times. Is clear about Force goals and effectively contributes to local business plan objectives.
Management of Police Information (MOPI) (Level 5)
Has sufficient understanding of the NPCC records management policies be able to offer appropriate guidance and support to staff. Is able to identify the appropriate MOPI group for any record with a policing purpose and ensure that all policing records within the team are retained, reviewed or destroyed in line with the MOPI codes of practice. Quality assures staff to ensure a full understanding and compliance with the APP for Information Management (incorporating MOPI guidance), highlighting failings and taking appropriate action as required. Ensures training and / or refresher training is provided and completed. Ensures that systems are correctly linked together to ensure effective management and recording of information across systems. Appropriately reviews digital information held on system(s) and physical records in storage to ensure that they are retained only where there is a policing purpose. Complies with relevant policies and procedures in respect of prioritisation, sanitisation, dissemination, sharing, relevancy, accuracy, adequacy and timeliness.
Office Technology (Level 4)
Demonstrates advanced skills in the use of one or more office software products Able to use these packages to enhance the quality or presentation of work required within the role. Manages data files and file structures. Provides on the job training and guidance to other staff in the use of specific or specialist software, if required. Familiar with established IT rules and protocols and shows a good understanding of data protection requirements.
Research Techniques (Level 4)
Has a thorough understanding of research methods and is able to fully utilise these for a range of research projects. Able to analyse reports and data produced by other individuals/organisations and extract relevant details to support the project in hand. Produces a range of options for consideration. Aware of the financial, organisational and service delivery implications of options.
Risk Management (Level 4)
Able to anticipate risks likely to affect the team's ability to execute their function, in terms of likelihood and impact, and assesses how the challenges facing the wider organisation might affect their team and their objectives. Has an understanding of pathways to alert local managers to flawed or ineffective operational control strategies and provide continuity/recovery options. Has an appreciation that seizing opportunities also generates risks.