PC3S038 - Cyber Crime and Forensic Investigation 18 Aug 2023 - 31 Aug 2025 | Version 5

Associated Module Information

Module Code: PC3S038
Module Title: Cyber Crime and Forensic Investigation
Faculty: Faculty of Life Sciences and Education
Faculty Group: Policing and Criminology
Faculty Sub Group: Psychology
Module Leader: Alun Davies
Module Team: Daniel Welch, Janine Vickery, Helen Martin
First Intended Intake: SEP 2019 Final Year of Intake: 2024
Date Closed:
Credit Value: 20 Credit Level: 6
Language: English
Percentage of Module Taught in Welsh: 0
Equivalent Module:
HECOS codes: 100486 - policing
HECOS Code Weighting: 100

Document Version Information

Version 5
Valid From 18 Aug 2023
Valid To 31 Aug 2025

Module Aims

To embed the skills and knowledge needed for first responding police officers to investigate and analyse cyber facilitated crime. Emulating the process from initial search warrant to court cross examination.

Content Summary

This module is designed to introduce students to the principles of implementing digital crime investigation practices. The module will explore how practitioners carry out digital and cyber-enabled criminal investigations. The module will emulate a digitally facilitated criminal investigation process. Students will be introduced the complexities associated with digital policing and digitally-facilitated crimes. Students will be introduced to key terminology associated with digital technology and gain a critical insight into how technology can be used in everyday policing and criminal investigations. Legislation and regulations relevant to the use of technology within digital policing and digitally facilitated crimes will be examined and applied to offences covered with the Serious and Organised Crime module (PC3S039) – i.e. drugs offences, human trafficking, child grooming and fraud, for example. Students will investigate how criminals engage in complex digital crimes such as hacking, malware attacks, denial of service and data manipulation and consider the impact this can have on individuals and businesses.
In this module students will study various forms of e- crime and approaches to digital policing. E-crime is a complex and developing area of criminal activity which poses several challenges in terms of policing and prevention of crime. Internet-enabled crimes represent a range of new crimes which target individuals and businesses. Examples of e-crime and links to organised crime will be researched and discussed.

This module is designed introduce students to the principles of investigation practice; exploring how practitioners carry out investigations while recognising the importance of intelligence management and evidence gathering to the investigation process.

Students will cover the key elements associated with conducting investigations, including the use of case studies, HMIC / HMICFRS reports, IOPC Learning the Lessons reports, to enable students to demonstrate decision making and associated recording requirements.
Students will also examine the processes for the provision of materials for disclosure by the Crown Prosecution Service.

Linked to Evidence-Based Policing (EBP), students will consider how the National Decision Making Model (NDM) and use of Forensic investigative practices can support a case ; i.e., finding the most appropriate line(s) of enquiry to pursue; determine the objective of pursuing particular lines of enquiry; identify the investigative action(s) necessary to efficiently achieve the objectives, taking into account resources, priorities, necessity and proportionality; and understand a digitally enabled criminal investigation process.

Students will be expected to engage with a number of practical / role-play exercises and scenarios which test their understanding of policing in a practical context, students will be encouraged to evaluate the connections between law, procedure and professional practice through a digitally-enabled crime.


Examples of the types of practical exercise deployed on this module include:
• The recovery of digital forensic evidence from the Crime Scene House during an investigation into an internet facilitated crime

Bridging the connection between digital policing, seizure and digital forensic examination of devices for evidential purposes.
• Knowledge of core legislation will be tested through a series of practical assessments, including the execution of a search warrant also presenting evidences in a Moot Court.

Project and Case Management:

  • Managing the criminal/civil process within a policing context.
  • Case management
  • Team / co-operative working.

Evidential Management:

  • Police and Criminal Evidence Act 1984 (PACE)
  • Data Protection Act 2018
  • S1.2 Part II Criminal Procedure and Investigation Act 1996.

Crime Scene protocols and procedures for seizing securing and analysing evidence.

The above is undertaken in accordance with the National Police Chiefs Council Good Practice Guide on Digital Evidence V5 (ACPO):

  • Understanding and validating the chain of custody
  • Synthesise the legal and procedural elements that validate and maintain evidential integrity.

The module has been designed in conjunction with the Regional Crime Unit of South Wales Police.

College of Policing Learning Objective Links

Understanding the Police Constable Role

A2 - Review the role of law enforcement agencies and how a police constable can support these agencies to deliver a safer UK

A4 - Explain the structure of the police service and the functions and the roles of members of the service

A6 - Understand how to exercise police powers and procedures fairly and without bias

Valuing Difference and Inclusion

B4 - Critically evaluate the impact upon policing of differing values, ethics and norms within diverse communities

Maintaining Professional Standards

C1 - Understand the necessity for maintaining professional standards in policing, and relevant governance, roles and responsibilities

Research Methods and Skills

F4 - Demonstrate a structured approach to studying, writing essays and referencing content

F9 - Demonstrate autonomy, as well as accountability and working with others, in a study skills context

Digital Policing

K3 - Explain how technology may be used in everyday policing

K4 - Understand specific legislation associated with digital-facilitated crimes

K7 - Describe complex types of digital- facilitated crimes and their impact

Criminal Justice

M1 - Explain the criminal justice system and the legislation and processes that support it

M3 - Explain the considerations associated with supporting victims and witnesses through the criminal justice system

M7 - Explain the processes for provision of materials for disclosure by CPS M8 - Explain the stages of the court process

M8 - Explain the stages of the court process

Module Summary (CoP only)

This simulation-based module has been designed in conjunction with the Regional Organised Crime Unit and offers students the opportunity to learn the skills and knowledge of an officer responding to cyber-facilitated crime. It maps to the curriculum in the areas of investigation, powers and professional standards but features valued added content to introduce students to policing in the wider context. Students will develop skills in applying for and executing a search warrant under PACE; searching premises and seizing evidence; reporting writing and testimony and court room cross examination.

College of Policing Curriculum Mapping

A2.1, A4.2, A.4.3, A6.1, A6.4.17, B4.6, B4.7, C1.1, F9.3, F4.10.4, K3.1- K3.1.1, K3.2, K4.1, K7.1, M1.2, M1.5.5, M1.5.6, 3.1.1. M7.1-3, M8.7

Learning and Teaching Methods

Activity Type Hours
Tutorial 12
Practical classes and workshops 10
Independent Study 76
Directed Study 88
Formative Assessment - Independent 2
Active/Simulation Based 8
Groupwork 4
Total Hours Selected 200

Learning Outcomes

# Learning Outcome
LO1 Work cohesively as part of a case team to seize evidential artefacts under warrant and manage the Cyber Crime investigation process from seizure to court room testimony.
LO2 Through research and evaluation, demonstrate application of knowledge of the legal, professional and College of Policing code of conducts associated with the evidential integrity within a Cyber Crime investigation.

Module Requisites

N/A

Assessment Criteria

Assessment Category Assessment Type Description Duration Word Count Weight (%) Best of? Pass Mark
Synchronous Onsite Practical Assessment Simulation (Onsite) 1 On site simulation assessment of application of knowledge and practical skills to real world problems via simulation of an event or situation that reproduces the characteristics with which a learner physically interacts 60 N/A 50 No 40
Asynchronous Assessment Report 1 Two written reports that draw on knowledge and material from the course 0 2000 50 No 40

Assessment Matrix

Assessment Type Learning Outcomes
LO1 LO2
Simulation (Onsite) 1
Report 1

Reading List

Babak A., Standfort, A., and Bosc, A. (2014) Cyber Crime and Cyber Terrorism Investigators Handbook. Boston: Elsevier.

 

Becker, R. (2009). Criminal Investigation. Massachusetts: Jones and Bartlett Publishers

Blackstones (2014). Handbook of Cyber Crime Investigation. Oxford University Press. Oxford.

Britz, M. (2013). Computer Forensics and Cyber Crime 3rd Edition, Boston: Pearson

Casey, E. (2011). Forensic Science Computers and the Internet 3rd edition. Burlington: Academic Press.

Cross, M. (2008) Scene of the Cyber Crime. 2nd Edition. Syngress Publishing. London

Holt, T. (2018). Cyber Crime and Digital Forensics, an introduction to. Second Edition, New York, Rout

Journal of Digital Forensics, Security and Law

Lloyd, I. (2011). Information Technology Law: 6th Edition. Oxford University Pres, USA

Monkton-Smith, L. (2013). Introducing Forensic and Criminal investigations Safe , London

National Chiefs Council. (2016). Digital Evidence Guide V.5