CyberSecurity Forensic Analyst (CSFA)

The CSFA certification exam resembles a scenario that a forensic analyst will encounter in the real world, with a specific time frame to complete the analysis, and the ability to request additional information relevant to the case. This is an advanced test, designed for professionals who already possess practical experience in the field of digital forensics.

CSFA candidates will have three days to take the test. There is a written component of 50 multiple choice questions, with the majority of the test being hands-on. Candidates will be given a scenario that includes processing a computer hard drive with a Windows operating system and may include other media such as a CD, DVD, or USB drive. Some scenarios include a cellular phone or other handheld device. The candidate may be presented with a running computer to analyze, or will have the media/devices to be analyzed being delivered by courier.

The written test will comprise 30% of the total score, with the practical comprising 70% of the total score. An overall score of 85% must be attained in order to earn the designation of CyberSecurity Forensic Analyst (CSFA).

Candidates will be allowed to request additional information after reviewing their particular scenario, such as logs, acceptable use policies, interrogatories, etc. Depending on the scenario that the candidate receives, he or she may need to creat an affidavit, declaration, and/or assist in creating the verbiage for subpoenas and motions.

Candidates will also be required to verify and document that their forensic workstation is in proper operating condition, as well as verify and document the proper operation of any write blocking or imaging hardware/software used. A chain of custody will also need to be established for all evidence.

Certification Name

CyberSecurity Forensic Analyst (CSFA)

Prerequisites & Required Courses

Recommended:
Minimum of two years of digital forensics experience and one of the following certifications:
• AccessData Certified Examiner (ACE)
• Certified Forensic Computer Examiner (CFCE)
• Certified Computer Examiner (CCE)
• Computer Hacking Forensic Investigator (CHFI)
• EnCase Certified Examiner (EnCe)
• GIAC Certified Forensics Analyst (GCFA)
Required:
• FBI criminal background check
• A completed CSFA Certification Exam Application and Agreement

Number of Exams

One exam (offered three times per year in Washington state, three days to complete, overall passing score of 85):
• Written component (50 multiple-choice questions, majority are hands-on; comprises 30 percent of total score)
• Practical component (comprises 70 percent of total score)

Cost per Exam

$750 USD

URL

www.cybersecurityforensicanalyst.com/index.html

Self-Study Materials

No specific self-study materials available; CyberSecurity Institute allows candidates to bring reference material they would “normally use when conducting a forensic analysis” to practical portion of exam
CyberSecurity Academy offers training courses for candidates with no forensic