Considerations in Retaining a Computer/ Digital Forensics Examiner

First, when speaking with the examiner, ask for a copy of his or her curriculum vitae (CV).

The next question to ask, is what support in depth and breadth does the examiner have in their firm. Many firms are one examiner deep. If the task is specifically something that they have handled extensively and you have a clear sense that the tasks will not expand into substantially different areas of expertise this could be quite acceptable. If however, the full scope of the work that needs to be done is not clear, a firm with broader and deeper resources may be more appropriate to your client's needs. At IT Forensics, Inc. we don't rely on the services of one examiner to do everything, but rather we work as a team. Each person on our team has general computer forensic training and experience in computer/digital forensics, but they also have a specialized set of skills targeting some specific aspect of the broader field of digital forensics.

If it is clear that your client's situation will require the services of more than one examiner, the person you are speaking with should offer the CVs of other examiners as appropriate.

Review the CVs of the examiners for the major aspects of qualification:

Education/training, experience, publication/teaching.

Read the CVs critically. You should anticipate that opposing counsel will review the CVs with an eye to cross-examination of the examiner.

In evaluating the rates of examiners, you should keep in mind that you will to a significant degree, get what you pay for. The training, education and depth of experience as well as specialized experience of an examiner will determine the weight that an examiner's testimony will carry and this will in turn be reflected in the rates charged for an examiner's services.

When evaluating whether to retain a specific examiner or firm, also consider the additional resources that a firm may provide. These additional services can vary widely, and you should determine whether they are of value to your client.

Each person on our team has general computer forensic training and experience in computer/digital forensics, but they also have a specialized set of skills targeting some specific aspect of the broader field of digital forensics.