Grant Liddy

Australian Federal Police (Former ANZPAA NIFS Director)

Published: 29 Jan 2025

Churchill Fellowship Report: International digital forensics strategies to inform future operating models

I am pleased to announce that my final report, titled 'To research international digital forensics strategies to inform future operating models,' has been completed and published by the Winston Churchill Memorial Trust. This report encapsulates my findings and recommendations for Australian and New Zealand agencies after engaging with 26 various agencies/ organisations across six countries, including the US, Canada, England, the Netherlands, Switzerland, and Singapore.

Over 5.5 weeks, I participated in numerous meetings and discussions, covering various aspects of digital forensics (DF), such as operating and service delivery models, legislation, data analysis/evidence review, training, people, standards and validation, partnerships, as well as innovation and challenges faced by different organisations. Some of the key recommendations outlined in the report include:

Churchill Report

Strategic Planning and Investment

A pivotal recommendation emphasises the need for long-term strategic planning and investment in DF. By adopting a centralised approach, agencies can achieve greater efficiency in resource allocation, cost savings, and sustainable funding. This approach addresses the inefficiencies of decentralised DF delivery and enables agencies to maintain technological relevance through continuous investment.

Workforce and Demand Assessment

Understanding the specific demands for DF examiners and resources is crucial. Agencies are encouraged to conduct detailed assessments to determine the appropriate workforce size and technical capabilities required. A centralised data approach is recommended to provide accurate insights, ensuring that funding and resources are allocated effectively to implement a workforce model that reflects the current crime environment (encryption, live forensics, cloud) and provide timely investigative insights.

Delivery Models

The fellowship recommends a balanced delivery model that integrates frontline police, DF expertise, and high-end capabilities. Centralised oversight and consistent standards are vital to achieving cost efficiencies and mitigating risks associated with decentralised delivery.

Legislation and Legal Frameworks

Active engagement with legislators is essential to develop legal frameworks that support effective digital investigations. Addressing challenges such as encryption and remote data access through robust legislation will enhance the ability of law enforcement to conduct thorough and efficient investigations.

Data Review and Analysis

Investing in dedicated digital evidence networks and forensically sound review systems is recommended to improve the management and analysis of digital evidence. Given the increasing volume and complexity of digital evidence, additional support for investigators is necessary. Roles such as digital evidence advisors can bridge the gap between investigators and DF experts, offering vital assistance in planning, understanding, and reviewing data. Advanced tools like AI, machine learning, and natural language processing can provide deeper insights and improve the efficiency of investigations.

Validation and Standards

Implementation of a quality framework with standard operating practices is crucial. Agencies should assess the feasibility of centrally created known datasets and validation plans to streamline the validation process, noting the resource demands required for a constantly changing technology landscape.

Innovation and Research

Continuous innovation is critical in the ever-evolving field of DF. Agencies must acknowledge this ongoing resource commitment and explore partnerships with academic institutions, industries, and other law enforcement agencies to drive research and development. Establishing dedicated teams focused on advancements and innovations will help agencies stay ahead of technological trends.

Training and Recruitment

Standardising training across agencies and strengthening connections with higher education providers are key recommendations. Utilising guidelines such as the ANZPAA Education and Training Guidelines for Technology Crime will enhance the consistency and interoperability of DF training, and could assist higher education providers to develop curricula focused on training students for roles within DF.

National Strategy

An overarching national strategy led by senior executives to drive initiatives related to skills frameworks, interoperability, standards, and innovation is essential. Creating a centralised hub of expertise and specialisation in DF will offer high-end support and resources, transforming the capacity of law enforcement across the region. The full report is now available on the Churchill Trust website and provides more detailed insights and strategic recommendations that aim to enhance the effectiveness of DF efforts in Australia and New Zealand.

Members only access

All Australia and New Zealand police members/employees are entitled to access this publication through ANZPAA's secure member site. You must provide your official police jurisdictional email address to subscribe.

LoginSubscribe

BACK TO BLOG

Related

Principles of an authentic quality culture 350 x 150 px

Fostering a Quality Culture in Forensic Science

The ANZPAA NIFS Quality Specialist Advisory Group has recently developed the Principles of Authentic ...

Find out more
Churchill 350 x 150

Churchill Fellowship Report: International digital forensics strategies to inform future operating models

Key finding recommendations for Australian and New Zealand agencies following research into internat ...

Find out more
NIFS-Groups-Thumb

An appreciation of the ANZPAA NIFS Groups

The ANZPAA NIFS Groups are essential components of the broader forensic landscape. Through their dil ...

Find out more
Investigations, intelligence, and forensic science technology 350 x 150

Investigations, intelligence, and forensic science technology

Advances in forensic technology and their adoption within policing show significant potential for im ...

Find out more