The National Strategy for Child Exploitation Prevention and Interdiction

The DEU is the principal group responsible for the collection, preservation, and examination ofcomputer digital evidence in support of all Inspection Service investigations. Digital evidenceanalysts are tasked with examining computer evidence and any digital media for information ordata pertinent to Postal Inspection Service investigations. Examples of cases that mayincorporate this type of evidence are: child pornography/exploitation, homicide, rape, suicide,mail theft, fraud, identity theft, or other related crimes against the Postal Service. Approximately26% of the digital forensic work conducted by the DEU involves child exploitation cases. In FY2008, the DEU conducted 269 child exploitation forensic examinations; in FY 2009, it conducted260; and in the first six months of FY 2010, it has conducted 105. In addition to processingcases, the Digital Evidence Unit is available for technical advice and assistance in seizing andpreserving evidence at the crime scene.4. ICE Computer Forensics ProgramThe ICE Computer Forensics Program (CFP) was formalized under the legacy U.S. CustomsService in 1997 under the Office of Investigations. The ICE CFP continues to operate under theICE Office of Investigations as a Section within the ICE Cyber Crimes Center (C3).The Computer Forensics Section (CFS) provides programmatic oversight, equipment, technicalsupport, guidance and training to the entire ICE Computer Forensics Program (CFP). The ICECFP is comprised of ICE Special Agents and Criminal Research Officers, trained and equippedto conduct analysis of digital evidence in furtherance of criminal investigations. The successfulinvestigation and prosecution of criminal violations by ICE is largely dependent on the ability toquickly seize, process, and analyze evidentiary digital data obtained from seized electronicdevices and digital media. To meet the goals and objectives of the overall ICE mission, the ICECFS draws upon a long-standing, comprehensive training curriculum that provides ComputerForensics Agents/Analysts (CFA) with basic and advanced computer forensics training skills.To support the CFP, the CFS also conducts research and development and initiates projects innew and challenging technologies. The CFS continually procures software, equipment, supplies,upgrades, storage media, and new digital forensic equipment to support the CFP in meeting thedemands posed by these ever-changing technologies. The CFS also monitors and tracks theefficiency and production of the CFP and responds to requests for assistance and operationalsupport. The CFS promotes continuing education, such as professional and industry-standardcertification initiatives, in an effort to ensure that CFAs in the field are trained and certified inthe most current computer forensics techniques. There are currently 240 trained ComputerForensics Agents in 105 field offices worldwide.The Treasury Computer Forensics Training Program (TCFTP) is at the core of the ICE CFP andis a joint training initiative funded by the Treasury Executive Office of Asset Forfeiture(TEOAF). The TCFTP is comprised of the respective computer forensics and training programsof ICE, the U.S. Secret Service, and Internal Revenue Service. Since the inception of the TCFTPin 1997, approximately 325 ICE Special Agents have been trained.In FY 2005, ICE initiated a Regional Computer Forensic Storage Program with funding from aCongressional earmark. During the past four years, ICE has provided funding for the project,134