NTISthis.com

Evidence Guide: DEFFOR008 - Detect, record and collect electronic evidence

Student: __________________________________________________

Signature: _________________________________________________

Tips for gathering evidence to demonstrate your skills

The important thing to remember when gathering evidence is that the more evidence the better - that is, the more evidence you gather to demonstrate your skills, the more confident an assessor can be that you have learned the skills not just at one point in time, but are continuing to apply and develop those skills (as opposed to just learning for the test!). Furthermore, one piece of evidence that you collect will not usualy demonstrate all the required criteria for a unit of competency, whereas multiple overlapping pieces of evidence will usually do the trick!

From the Wiki University

 

DEFFOR008 - Detect, record and collect electronic evidence

What evidence can you provide to prove your understanding of each of the following citeria?

Detect and record electronic evidence

  1. Detect electronic evidence using observational techniques and technological methods.
  2. Record electronic evidence prior to examination.
  3. Document the recorded electronic evidence.
Detect electronic evidence using observational techniques and technological methods.

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Record electronic evidence prior to examination.

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Document the recorded electronic evidence.

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Collect electronic evidence

  1. Collect electronic evidence by handpicking or removing media from machines to prevent contamination or loss.
  2. Ensure that collected electronic evidence is sufficient in quantity, where possible, to allow all potential examinations/analyses to be carried out.
Collect electronic evidence by handpicking or removing media from machines to prevent contamination or loss.

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Ensure that collected electronic evidence is sufficient in quantity, where possible, to allow all potential examinations/analyses to be carried out.

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Package electronic evidence

  1. Package and store items to maintain continuity and prevent degradation or contamination.
  2. Package electronic evidence.
  3. Enter details of electronic evidence collected in case notes and, where appropriate, in the exhibit register to maintain continuity.
Package and store items to maintain continuity and prevent degradation or contamination.

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Package electronic evidence.

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Enter details of electronic evidence collected in case notes and, where appropriate, in the exhibit register to maintain continuity.

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Detect and record electronic evidence

  1. Detect electronic evidence using observational techniques and technological methods.
  2. Record electronic evidence prior to examination.
  3. Document the recorded electronic evidence.
Detect electronic evidence using observational techniques and technological methods.

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Record electronic evidence prior to examination.

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Document the recorded electronic evidence.

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Collect electronic evidence

  1. Collect electronic evidence by handpicking or removing media from machines to prevent contamination or loss.
  2. Ensure that collected electronic evidence is sufficient in quantity, where possible, to allow all potential examinations/analyses to be carried out.
Collect electronic evidence by handpicking or removing media from machines to prevent contamination or loss.

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Ensure that collected electronic evidence is sufficient in quantity, where possible, to allow all potential examinations/analyses to be carried out.

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Package electronic evidence

  1. Package and store items to maintain continuity and prevent degradation or contamination.
  2. Package electronic evidence.
  3. Enter details of electronic evidence collected in case notes and, where appropriate, in the exhibit register to maintain continuity.
Package and store items to maintain continuity and prevent degradation or contamination.

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Package electronic evidence.

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Enter details of electronic evidence collected in case notes and, where appropriate, in the exhibit register to maintain continuity.

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Assessed

Teacher: ___________________________________ Date: _________

Signature: ________________________________________________

Comments:

 

 

 

 

 

 

 

 

Instructions to Assessors

Evidence Guide

ELEMENTS

PERFORMANCE CRITERIA

Elements describe the essential outcomes

Performance criteria describe the performance needed to demonstrate achievement of the element. Where bold italicised text is used, further information is detailed in the range of conditions section.

1. Detect and record electronic evidence

1.1 Detect electronic evidence using observational techniques and technological methods.

1.2 Record electronic evidence prior to examination.

1.3 Document the recorded electronic evidence.

2. Collect electronic evidence

2.1 Collect electronic evidence by handpicking or removing media from machines to prevent contamination or loss.

2.2 Ensure that collected electronic evidence is sufficient in quantity, where possible, to allow all potential examinations/analyses to be carried out.

3. Package electronic evidence

3.1 Package and store items to maintain continuity and prevent degradation or contamination.

3.2 Package electronic evidence.

3.3 Enter details of electronic evidence collected in case notes and, where appropriate, in the exhibit register to maintain continuity.

Required Skills and Knowledge

ELEMENTS

PERFORMANCE CRITERIA

Elements describe the essential outcomes

Performance criteria describe the performance needed to demonstrate achievement of the element. Where bold italicised text is used, further information is detailed in the range of conditions section.

1. Detect and record electronic evidence

1.1 Detect electronic evidence using observational techniques and technological methods.

1.2 Record electronic evidence prior to examination.

1.3 Document the recorded electronic evidence.

2. Collect electronic evidence

2.1 Collect electronic evidence by handpicking or removing media from machines to prevent contamination or loss.

2.2 Ensure that collected electronic evidence is sufficient in quantity, where possible, to allow all potential examinations/analyses to be carried out.

3. Package electronic evidence

3.1 Package and store items to maintain continuity and prevent degradation or contamination.

3.2 Package electronic evidence.

3.3 Enter details of electronic evidence collected in case notes and, where appropriate, in the exhibit register to maintain continuity.

Evidence required to demonstrate competence must satisfy all of the requirements of the elements and performance criteria. If not otherwise specified the candidate must demonstrate evidence of performance of the following on at least one occasion.

solving problems

making analytical decisions

examining electronic evidence

maximising the evidentiary value of the electronic evidence

handling and preserving continuity of evidence

collecting and preserving specific evidence types

operating safely

packaging and storing items to maintain continuity and prevent degradation or contamination by considering:

physical nature of exhibit

electronic stability

packaging medium

tamper-evident seals

exhibit labels

storage temperature

Evidence required to demonstrate competence must satisfy all of the requirements of the elements and performance criteria. If not otherwise specified the depth of knowledge demonstrated must be appropriate to the job context of the candidate.

legislative, policy and quality system context and requirements

available techniques and their limitations

required documentation

roles and functions of other forensic discipline specialists

WHS