Faculty of Health, Engineering and Science

School: Computer and Security Science

This unit information may be updated and amended immediately prior to semester. To ensure you have the correct outline, please check it again at the beginning of semester.

  • Unit Title

    Forensic Investigation and Evidence Presentation
  • Unit Code

    CSG6107
  • Year

    2015
  • Enrolment Period

    1
  • Version

    1
  • Credit Points

    20
  • Full Year Unit

    N
  • Mode of Delivery

    Online

Description

This unit is designed to explore the proper processes and legal issues with the presentation of digital evidence. The content of the unitwill examine appropriate methods and techniques for presentation of digital forensic evidence as an expert witness.

Prerequisite Rule

Students must pass 2 units from CSI4102, CSI5319

Equivalent Rule

Unit was previously coded CSG5108

Learning Outcomes

On completion of this unit students should be able to:

  1. Analyse digital evidence cases.
  2. Analyse issues with investigation andpresentation of digital forensics evidence.
  3. Demonstrate knowledge of the current legal positions with presentation and investigation of digital evidence.
  4. Evaluate evidence from a digital evidence case for viability.
  5. Reflect on special forensics issues associated with digital evidence.
  6. Use evidence resulting from digital forensic examination in a cogent and competent manner.

Unit Content

  1. Determining the nature of valid digital evidence.
  2. Legal implications relating to digital forensic investigations and presentation.
  3. Management issues and policy determination relating to digital forensic investigations.
  4. Presentation of evidence in a legal framework at national and international level.
  5. The expert witness.
  6. The forensic process.

Additional Learning Experience Information

Lectures, workshops, case studies, group work and practical exercises.

Assessment

GS1 GRADING SCHEMA 1 Used for standard coursework units

Students please note: The marks and grades received by students on assessments may be subject to further moderation. All marks and grades are to be considered provisional until endorsed by the relevant Board of Examiners.

ON CAMPUS
TypeDescriptionValue
PortfolioInvestigative portfolio40%
Case StudyCase study in investigation and evidence60%
ONLINE
TypeDescriptionValue
PortfolioInvestigative portfolio40%
Case StudyCase study in investigation and evidence60%

Text References

  • ^ Smith, F. C., & Bace, R.G. (2003). A guide to forensic testimony: The art and practice of presenting testimony as an expert technical witness. Boston, MA: Addison-Wesley.
  • Standards. (2003). HB 171-2003 Guidelines for the management of IT evidence. Sydney, Australia: Standards Australia.
  • Frecklton, I., Ian, R. & Selby, H. (2013). Expert evidence: law, practice, procedure and advocacy (5th ed.). Pyrmont, NSW: Lawbook Co.
  • Bronstein, D. (2014). Law for the expert witness (4th ed.). Boca Raton, FL: CRC Press.
  • Brodsky, S. (1999). The expert expert witness: more maxims and guidelines for testifying in court. Washington, DC: American Psychological Association.

^ Mandatory reference


Disability Standards for Education (Commonwealth 2005)

For the purposes of considering a request for Reasonable Adjustments under the Disability Standards for Education (Commonwealth 2005), inherent requirements for this subject are articulated in the Unit Description, Learning Outcomes and Assessment Requirements of this entry. The University is dedicated to provide support to those with special requirements. Further details on the support for students with disabilities or medical conditions can be found at the Access and Inclusion website.

Academic Misconduct

Edith Cowan University has firm rules governing academic misconduct and there are substantial penalties that can be applied to students who are found in breach of these rules. Academic misconduct includes, but is not limited to:

  • plagiarism;
  • unauthorised collaboration;
  • cheating in examinations;
  • theft of other students' work;

Additionally, any material submitted for assessment purposes must be work that has not been submitted previously, by any person, for any other unit at ECU or elsewhere.

The ECU rules and policies governing all academic activities, including misconduct, can be accessed through the ECU website.

CSG6107|1|1

Faculty of Health, Engineering and Science

School: Computer and Security Science

This unit information may be updated and amended immediately prior to semester. To ensure you have the correct outline, please check it again at the beginning of semester.

  • Unit Title

    Forensic Investigation and Evidence Presentation
  • Unit Code

    CSG6107
  • Year

    2015
  • Enrolment Period

    2
  • Version

    1
  • Credit Points

    20
  • Full Year Unit

    N
  • Mode of Delivery

    Online

Description

This unit is designed to explore the proper processes and legal issues with the presentation of digital evidence. The content of the unitwill examine appropriate methods and techniques for presentation of digital forensic evidence as an expert witness.

Prerequisite Rule

Students must pass 2 units from CSI4102, CSI5319

Equivalent Rule

Unit was previously coded CSG5108

Learning Outcomes

On completion of this unit students should be able to:

  1. Analyse digital evidence cases.
  2. Analyse issues with investigation andpresentation of digital forensics evidence.
  3. Demonstrate knowledge of the current legal positions with presentation and investigation of digital evidence.
  4. Evaluate evidence from a digital evidence case for viability.
  5. Reflect on special forensics issues associated with digital evidence.
  6. Use evidence resulting from digital forensic examination in a cogent and competent manner.

Unit Content

  1. Determining the nature of valid digital evidence.
  2. Legal implications relating to digital forensic investigations and presentation.
  3. Management issues and policy determination relating to digital forensic investigations.
  4. Presentation of evidence in a legal framework at national and international level.
  5. The expert witness.
  6. The forensic process.

Additional Learning Experience Information

Lectures, workshops, case studies, group work and practical exercises.

Assessment

GS1 GRADING SCHEMA 1 Used for standard coursework units

Students please note: The marks and grades received by students on assessments may be subject to further moderation. All marks and grades are to be considered provisional until endorsed by the relevant Board of Examiners.

ON CAMPUS
TypeDescriptionValue
PortfolioInvestigative portfolio40%
Case StudyCase study in investigation and evidence60%
ONLINE
TypeDescriptionValue
PortfolioInvestigative portfolio40%
Case StudyCase study in investigation and evidence60%

Text References

  • ^ Smith, F. C., & Bace, R.G. (2003). A guide to forensic testimony: The art and practice of presenting testimony as an expert technical witness. Boston, MA: Addison-Wesley.
  • Standards. (2003). HB 171-2003 Guidelines for the management of IT evidence. Sydney, Australia: Standards Australia.
  • Frecklton, I., Ian, R. & Selby, H. (2013). Expert evidence: law, practice, procedure and advocacy (5th ed.). Pyrmont, NSW: Lawbook Co.
  • Bronstein, D. (2014). Law for the expert witness (4th ed.). Boca Raton, FL: CRC Press.
  • Brodsky, S. (1999). The expert expert witness: more maxims and guidelines for testifying in court. Washington, DC: American Psychological Association.

^ Mandatory reference


Disability Standards for Education (Commonwealth 2005)

For the purposes of considering a request for Reasonable Adjustments under the Disability Standards for Education (Commonwealth 2005), inherent requirements for this subject are articulated in the Unit Description, Learning Outcomes and Assessment Requirements of this entry. The University is dedicated to provide support to those with special requirements. Further details on the support for students with disabilities or medical conditions can be found at the Access and Inclusion website.

Academic Misconduct

Edith Cowan University has firm rules governing academic misconduct and there are substantial penalties that can be applied to students who are found in breach of these rules. Academic misconduct includes, but is not limited to:

  • plagiarism;
  • unauthorised collaboration;
  • cheating in examinations;
  • theft of other students' work;

Additionally, any material submitted for assessment purposes must be work that has not been submitted previously, by any person, for any other unit at ECU or elsewhere.

The ECU rules and policies governing all academic activities, including misconduct, can be accessed through the ECU website.

CSG6107|1|2