Educause Security Discussion mailing list archives

Computer Forensic Requirements


From: Douglas Gale <dgale () ITASSOCIATES ORG>
Date: Mon, 26 May 2008 17:57:30 +0000

A number of states, including New York, South Carolina, and Texas, either require or are considering requiring computer 
forensic specialists to have a private investigator (PI) license.  A cursory reading of the various regulations in 
those states (I am not a lawyer) implies that this applies to a college or university employing an external firm for 
digital forensics.  What is less clear to me is whether or not it applies if internal staff is used for analysis.  Do 
they have to be licensed?  Or do they have to be licensed only if the findings are used in civil or criminal 
proceedings?  What about non-profit consortiums (e.g. state networks) that provide security services to their higher 
education members?  Has anyone had any experience with this issue or obtained legal opinions?

Current thread: