Page Loader Logo

The International Association of Computer Investigative Specialists

Certified Forensic Computer Examiner (CFCE)

CFCE Course Overview

IACIS offers the CFCE certification program to prospective candidates who wish to attain the CFCE certification.

IACIS has a well-defined certification policy. We highly encourage you to read this policy.

The IACIS membership fee is waived with the purchase of the certification process.

You can apply for, and purchase an IACIS Certification on our Purchase Certification page.

CFCE 2-Phase Program

The CFCE certification program is comprised of two phases. Both phases are required to be completed to become CFCE certified.

1. CFCE Peer Review Phase

Peer Review Chairman: Thomas Reinert

In the Peer Review phase, candidates complete four scenario-based problems guided by a forensic professional through a mentored process whereby candidates are able to submit reports or assessment documents after completing each practical exercise.

The Peer Review phase consists of the following elements:

  • Four (4) scenario-based practical problems
  • 30 days to complete each problem
  • A coach is assigned to guide you through the problem’s learning points
  • Must pass all four problems to be eligible to enter the certification phase

2. CFCE Certification Phase

CFCE Certification Chairman: Craig MacFarlane

In the Certification Phase the candidate must complete a practical exercise and written final examination. Upon successful completion, the candidate will be awarded the Certified Forensic Computer Examiner (CFCE) certification.

The Certification Phase consists of the following elements:

  • Hard drive practical problem – 30 days to complete
  • Knowledge based objective test – 14 days to complete

Entry into the Certification Phase is automatic once the Peer Review phase has been completed. The candidate will have 7 days to begin the hard drive practical problem and 30 days to complete it. Seven days after the peer review phase has been completed, whether the candidate logs in or not, the 44 day clock will begin.

The candidate will then go directly into the Knowledge Based test, which consists of 100 general digital forensic knowledge questions. The written exam consists of questions composed of true/false, multiple-choice, matching, and short essay (fill in the blank) questions. Candidates must obtain a minimum score of 80% on the exam and practical to pass. Failure to achieve the requisite score will result in failure, and the CFCE certification will not be awarded. 

Additional Details

Once both phases have been successfully completed, candidates will be required to complete a notarized form declaring that the practical examination and written examination were completed without assistance from anyone. The form must be completed and returned to the CFCE Certification Chairman (or designee) prior to issuance of the CFCE certification. The first and last name and certification ID number of each certified CFCE member will be listed on the IACIS public website.

Upon successful completion of the CFCE program in its entirety, IACIS will provide the successful candidate with a framed CFCE certificate at no expense to the candidate.

Candidates enrolled in the Peer Review phase are prohibited from discussing any matters related to the Peer Review phase with anyone other than their assigned coach, regional manager, division administrator, Peer Review Chairman, or Director of Certification. Candidates enrolled in the Certification Phase are prohibited from discussing any matters related to the Certification Phase with anyone other than the CFCE Certification Chairman or Director of Certification. Violation of this clause may result in the candidate’s immediate dismissal from the certification program.

Cheating, plagiarism, egregious policy violations, or unethical conduct will result in immediate dismissal from the certification program and will be referred to the Ethics Committee for possible revocation of IACIS endorsed certifications.

Each certified CFCE member must satisfy recertification requirements every three years. IACIS offers proficiency tests on a regular basis for organizations or laboratories that require frequent proficiency tests. Likewise, proficiency tests are offered to certified CFCE members in the third year from the initial date of certification for the sole purpose of recertification. Please review our CFCE Recertification page for more detailed info.

CFCE Certification F.A.Q.

Candidates failing either the practical examination or written final examination will not be re-examined immediately. The candidate can re-take the practical or final written exam in the next certification cycle. IACIS will allow each candidate to be re-examined one time without charge (practical or final examination). Failure of both parts in the Certification Phase will be a failure of the process. Candidates only get to take one of the two over. The requisite fee for any subsequent re-examination will be based on the fee schedule approved by the Board of Directors and posted on the IACIS website.

Only a current CFCE certificant is permitted to identify themselves as being a Certified Forensic Computer Examiner or use the CFCE logo.

CFCE IACIS Certification

Quick Details

Core Competencies / Details

The Certified Forensic Computer Examiner (CFCE) certification program is based on a series of core competencies in the field of computer/digital forensics. The candidate is required to demonstrate their knowledge of the CFCE core competencies​ and practical skills by successfully completing the peer review, practical and written examination instruments.

There are seven competency areas addressed in the BCFE/CFCE Program:

  • Pre-Examination Procedures
  • Computer Fundamentals
  • Partition Schemes
  • File Systems
  • Data Recovery
  • Windows Artifacts
  • Presentation of Findings

Download PDFPlease click here to download the official BCFE-CFCE Core Competencies document which includes details for each core competency.

IACIS Chair

Craig Macfarlane

CFCE Certification Chairperson

Apply knowledge towards:

CFCE IACIS Certification

CFCE

Certified Forensic Computer Examiner Program

CAWFE IACIS Certification

CAWFE

Certified Advanced Windows Forensic Examiner

CMDE IACIS Certification

ICMDE

IACIS Certified Mobile Device Examiner

Skip to content