CyberSecurity Forensic Analyst (CSFA)
Administered by the CyberSecurity Institute, the CyberSecurity Forensic Analyst Certification teaches professionals how to conduct a forensic examination of a computer or digital device, including CDs, DVDs, USBs, and mobile phones, and communicate their analysis to stakeholders. The three-day exam is held on-site at Edmonds College in Lynnwood, Wash., and consists of 50 multiple-choice questions and a hands-on scenario. Candidates are given a hard drive and, in some cases, additional media and must produce an affidavit, declaration, or other response depending on the scenario. To earn a CSFA, the professional must score 85% across the two sections, with the practical scenario accounting for 70% of the grade weight and the written score for the remaining 30%. Professionals who pass are prominently displayed on a public database of the CyberSecurity Institute alongside more than a hundred CyberSecurity forensic analysts. The last exam was held in August 2024; interested professionals should follow CyberSecurity’s website for announcements of the next date.
While there are no formal prerequisites, the CyberSecurity Institute recommends experience in the administrative side of digital forensics, such as writing the verbiage for subpoenas and motions. Candidates must also pass an FBI criminal background check, a process that can take up to three months.
Training fees: Edmonds College hosts an instructor-led CSFA study group over Zoom in advance of the exam. Professionals interested in joining are encouraged to contact cyberdefense@edmonds.edu for more information.
