Cybercrime Investigators Course
Course details
2026
| Session(s) | Location | Start date | End date |
|---|---|---|---|
| 26-01 English | Ottawa | 2026-02-23 | 2026-03-06 |
| 26-02 English | Ottawa | 2026-09-14 | 2026-09-25 |
| Tuition |
|---|
| $6,250.00 |
Notes
- Accommodations are offered to course participants. Our rooms are subject to availability and the request must be indicated on the course registration form
- Meal plans are offered to course participants. The specific meal plan must be indicated on the course registration form
- Travel grant funding is available to our non-federal law enforcement agencies
Description
This is an intermediate and technical course that focuses on conducting cybercrime investigations. Course participants work individually and in teams to learn how to collect and preserve evidence from technological and Internet-based sources, to apply cybercrime investigative techniques, and to navigate the legal and technical challenges of cyber investigations. Participants apply proven investigative methods and approaches through hands-on exercises, scenario-based learning, and course material as delivered by practitioners and subject matters experts. Since cybercrime threats are not limited by the extent of the laws they challenge, nor the jurisdictions they intrude upon, participants also learn the importance of working with other public agencies (Federal, Provincial, Municipal and International) and the private sector in their effort to prevent and stop these crimes.
Format and delivery
- Length of course
- 10 days
- Class size
- maximum 20 participants
- Delivery setting
- Computer classroom
Learning outcomes
- Lead a cybercrime investigation or provide advice to investigate cybercrime
- Apply the Cybercrime Incident Response model and Major Case Management principles to a cybercrime investigation
- Identify legislation and current case law related to cybercrime or cyber-facilitated crime
- Identify and use tools and resources necessary to initiate and conduct a cybercrime investigation
- Describe common stages of a cyber attack and the steps for of a network penetration
- Prepare, explain and defend a warrant to search for cybercrime-related evidence
- Explain how open source or /online undercover techniques are used to further cyber investigations and describe the best practices for use of these techniques
Eligibility and mandatory requirements
- This course is offered to investigators working in a special operations unit dealing with cyber related crimes
- Registrants must have successfully completed the Digital Technologies Investigators Course (DTIC) within the last five years or the Computer Forensic Examiner (CMPFOR). Proof of having passed the DTIC or the CMPFOR must be submitted with the registration form
- Registrants should have basic knowledge of command line usage in the Linux operating system. This knowledge can be achieved with the self-guided pre-course materials that are made available to registrants upon being registered in a course session
- Acceptance or refusal in the course is at the discretion of the Canadian Police College
Assessment
- Success in the course is based on attendance, participation and successful completion of all required assignments and learning evaluations
- Several evaluation methods are used, including pre-course assignments, various assignments, mid-course exam, preparation of an information to obtain and Production Order, and a final exam
- Students are expected to spend several hours on pre-course assignments, reading material and course exercises that will extend past regular course hours (evenings and weekend)
- Re-testing or re-evaluation is conducted in accordance with the CPC Academic Directives and at the discretion of the Canadian Police College
Contact
For more details or other information about the course, please email cpc_registrar-registraire_ccp@rcmp-grc.gc.ca.
- Date modified: