To supervise and manage the Data Forensics Team in their examination of electronic devices including telephony in all levels and types of crime. In particular, to:
• Liaise with other law enforcement agencies and co-ordinate other investigative efforts. • Give presentations and support training initiatives to promote the unit. • Provide specialist advice and assistance. • Assess and manage the training requirements of the Data Forensic Investigator, Mobile Device Examiners and Data Forensic Technicians. • To act as a Digital Forensic coordinator of staff and resources for investigations that require a multi discipline technical response across a single or multiple SW forces.
Responsible for the operational management and performance of staff within Data Forensics making effective use of resources to provide the highest level of service delivery across the South West Forces. Manage unit performance, which should directly link to Force performance framework and quality management systems.
Management of technical investigations involving the securing and retrieval of data from seized computers and mobile devices, including configuration of operating systems and applications. To also attend searches where necessary, producing technical documentation in relation to data retrieved from digital devices and media.
Assist in level 2 criminal investigations as directed by Force/Regional tasking to allow Force targets to be achieved efficiently and effectively. Liaise with other law enforcement agencies and co-ordinate other investigative efforts.
Act as a Data Forensic coordinator of staff and resources for investigations that require a multi discipline technical response across a single, or multiple, SW Force(s).
Main Responsibilities
Management Reporting into the Data Forensics Operations Manager the post holder will have responsibility for the line management of staff within the Data Forensics Operations Unit. Including the management and co-ordination and prioritising and monitoring of work schedules and activities, deployment, areas of best practice and legislation and technology changes. The post holder will also be required to oversee the welfare and sickness monitoring of respective teams. Manage the routine daily activities of data forensics service/maintenance and technical resources. Develop and maintain departmental plans and objectives, aligning them with regional and local requirements. Ensure all unit hardware/software maintenance and licensing is current, appropriate and cost effective. Through effective leadership undertake regular assessment of team and individual performance to ensure objectives and targets are being achieved. Implement, facilitate and manage local training, maximising opportunities to develop staff nationally and locally in line with Regional lead for training. Be an advocate and effectively manage change as driven by the Force and the Regional Objectives. Carry out management reporting on the unit as and when required both locally and for region.
Communication Ensure and facilitate lines of communication through the Force and within Region. Maintain a free-flow of information concerning all Data Forensics matters and forensic intelligence and support Forensic Intelligence staff in developing support to key stakeholders in areas of major and linked crime. Conduct regular management meetings with Unit staff. Develop team building ethos and drive excellence in leadership throughout. The post holder will also attend Regional and National meetings, representing the interests of Regional Forensic Services.
Management of Forensic Submissions, Risk Assessment and Decision Making Accountable for triage and gate-keep against offence, risk, proportionality and necessity to the investigation and escalate cases as required. Ensure that all relevant submissions criteria are met in line with policy and procedure. Undertake the risk assessment to establish the magnitude of impact the submission information represents. Prioritise workloads appropriately where applicable in accordance with Force and National guidelines for further investigation within Force or elsewhere.
Continuity, Security and Statements of Evidence Accountable for the continuity of evidential exhibits and working-copy information. Record the handling and processing of images/data used as evidential material. Take personal responsibility in the preparation of statements of evidence and attend court/ judicial proceedings when required to give evidence on results of the examinations undertaken and the complex processes involved. Knowledge of legislation to identify illegal content to enable correct handling of data and advise Investigators. Maintain and record the continuity of exhibits and report on this within witness statements. Take personal responsibility to ensure any relevant data supplied to defence experts and/or other agencies is correctly documented in relation to the Memorandum of undertaking. Ensure all sensitive and/or illegal data which leaves the unit is encrypted in accordance to unit/Force. Provide investigation strategies for Hi tech crime examinations and investigations to target the best evidence and minimise the risk to victims of crime and the organisation.
Technical Expertise To have a high level of working technical expertise and knowledge of systems which are utilised within the working environment as well as relevant working practices and procedures. Provide SIO’s and Major Incident Teams with advice to form investigation strategies and advice for operational investigators in relation to seizure of computer and telephony evidence. Manage the data storage and data storage strategy / policy for the unit including the archiving of the evidential data in line with the Management of Police Information. Provide expert advice and support to Digital Media investigators in the technical and practical options in securing digital evidence from all forms of investigations that involve a digital element. Responsible for the maintenance and management of the national Child Abuse Image Database (CAID). Perform multiple complex specialist technical or manual tasks according to professional, occupational or organisational standards.
Management of Retention, Destruction and Disposal Accountable for the management and maintenance of the destruction and disposal of evidential data/suspect equipment containing illegal material. Be responsible for the movement of evidential product and consumables between offices and storage areas. Catalogue and file all job files and archive data storage. Be responsible for managing data retention of submissions/exhibits and the weeding process in line with associated legislation, MOPI policy and procedure or subject to court destruction order from stores. Dispose of evidential exhibits in accordance with Force policy - transport to authorised waste disposal and witness/evidence destruction. Ensure the documentation is correct in line with the appropriate legislation (Police property act, Disclaimer, Court order, Police and Justice Act 2006).
Health and Safety Continually monitor working environment and practices and where applicable resolve problems. This may include dealing with health and safety issues of other services and stakeholders.
Projects – Lead and undertake designated project work as directed, Research, evaluate, analyse and prepare proposals for consideration as appropriate. Lead on analysing all forms of consultation data and feed this into strategic planning and improvement processes.
Professional Development – Undertake appropriate development when identified to align with the needs of the role.
This list of duties is not restrictive or exhaustive and the post-holder may be required to carry out duties from time to time that are either commensurate with/or lower than the grade of the post. In some posts this might include the ad-hoc provision of guidance and informal training of new colleagues.
Dimensions
Financial The allocation and monitoring of staff overtime, Flexi time and Annual Leave The authorisation of incidental expenses, e.g. travelling Server maintenance Budget £50k Biannually