Exercise 12
Exercise 12: Cooperation with Law Enforcement Agencies (Advising in Cyber Crime Cases)
| Main Objective | To explain a CERT’s role in advising in a cyber crime case and the basis for its effective cooperation with an LEA. | |
|---|---|---|
| Targeted Audience | Technical and management CERT staff | |
| Total Duration | 4 hours, 25 minutes | |
| Time Schedule | Introduction to the exercise | 10 min. |
| Task 1: Identification and reporting a cyber crime | 60 min. | |
| Task 2: CERT advises an incident reporter in a cyber crime case | 60 min. | |
| Task 3: CERT advises an LEA in a cyber crime case | 60 min. | |
| Task 4: CERT prepares training for an LEA | 60 min. | |
| Summary of the exercise | 15 min. | |
| Frequency | At least yearly | |
General Description
In this exercise the students will learn when and how CERT members cooperate with an LEA. In particular, the objectives of the exercise are to:
- practice the identification of cases of cyber crimes;
- make students aware of differences between the legal systems of various countries and the consequences of these differences;
- explain the legal aspects of CERT work;
- practice writing instructions regarding the reporting of a cyber crime to an LEA;
- provide information on how to advise a reporter or LEA in a cyber crime case; and
- develop ideas for training that will be useful for an LEA.
The trainer should have organisational and technical knowledge concerning legal procedures relating to IT crime and abuse, and should be familiar with the most significant differences between the laws of particular countries.
As it is very important for all CERT members to know about cooperation with an LEA, this exercise is aimed at both technical and management staff.
In its basic form the exercise lasts about three hours. As this exercise is designed to develop the skills of incident handlers in communicating with other parties and in exchanging formal, legal information which could have important consequences, it is recommended that this exercise be conducted often – at least yearly.
Download Exercise 12 Toolset - 134 kB
