Parsippany NJ 07054

International Society of Forensic Computer Examiners

Global Leaders in Digital Forensics Certification

ISFCE Digital Evidence Handling Proficiency Testing Policy

The International Society of Forensic Computer Examiners (ISFCE) is responsible for administering and regulating the ISFCE’s Digital Evidence Handling Proficiency Testing program according to the following policy.

1. General Policies

1.1. The ISFCE’s Digital Evidence Handling Proficiency Testing will remain reasonably priced and available to all who qualify.
1.2. The ISFCE will accommodate unique proficiency testing needs without compromising the integrity of the testing process.
1.3. All proficiency test subscribers must meet the same application and testing requirements, unless a limited scope preference is advised.
1.4. Contracted work related to ISFCE Proficiency Testing must follow signed contracts outlining work requirements and conflict avoidance details.

2. Proficiency Testing Process

2.1. Laboratory Registration and Requirements

Laboratories intending to sit for an upcoming proficiency test must meet the following requirements:

  • Complete the Proficiency Testing Application and obtain ISFCE approval.
  • Review and agree to the End User License Agreement (see PT End-User Agreement).
  • Clarify any questions or inaccuracies in the application before resubmission.
  • Applicants will be informed of acceptance or rejection.
  • If rejected, applicants must resubmit a new application.
  • Payment for proficiency tests must be submitted via credit card, check or EFT.
  • Payment must be received before the proficiency test distribution.
  • Upon qualification and payment, the applicant will be subscribed to the upcoming proficiency test distribution.

Subscriber information will be stored in ISFCE’s database for 5 years.

2.2Subscriber information

  • Subscriber correspondence and records will be stored electronically and securely.
  • Backup of records will occur monthly, stored in separate media.
  • Only authorized ISFCE personnel will access subscriber records.
  • Subscribers will receive a welcome email with test instructions, a unique identification number, and submission upload links.
  • During the distribution period, subscribers will receive proficiency test access instructions and test deadlines.
  • The Proficiency Test distribution period will last 60 days, with assessments starting only after all submissions are received.

2.3 Proficiency Test Distribution

a) The Proficiency Test distribution package will include:

  • Informational document with case scenario and test instructions.
  • Mock digital evidence (RAW media image).
  • Form for external release of assessment results.
  • Optional form for report submission.

b) Subscribers will upload their reports via a secure online cloud storage platform system before the test deadline.

c) Confirmation of submission receipt will be sent by the Proficiency Test Administrator.
Once all submissions are received, no further reports will be accepted, and assigned values will remain confidential.

2.4. Proficiency Test Reports.

ISFCE will distribute the following reports:

a) Preliminary Subscriber Report:

Issued 30 days after the test distribution period closure.
Contains test details and target values.

b) Individual Subscriber Report:

Issued 90 days after the test distribution period closure.

Contains individual assessment results.

d) PRC Summary Report:

Distributed to accrediting bodies, including only external subscribers’ assessment results with their consent.

3. Administrative and Confidentiality Policies(as per ISO 17043:2023)
3.1. Administrative Guidelines

3.1.1. Responsibilities and Oversight

The ISFCE management team is responsible for overseeing the administration of the Proficiency Testing (PT) program. All personnel involved in PT activities must adhere to established policies, procedures, and quality standards, ensuring effective operation and delivery of services.

3.1.2. Record Keeping and Data Management
  • All records related to the PT program, including participant information, test submissions, assessments, and communication, must be stored securely in accordance with ISFCE’s data management policies.
  • ISFCE shall maintain records for a period that complies with regulatory and contractual obligations, ensuring traceability and accessibility when necessary (usually 5 years).
  • All administrative processes, including participant registration, test distribution, report generation, and appeals, will follow defined workflows to maintain efficiency and integrity.

3.1.3. Contract Management

Any work performed by external service providers or contractors will be conducted with signed agreements, which outline roles, responsibilities, and conflict of interest avoidance. Contracted personnel are subject to the same confidentiality and conflict of interest policies as ISFCE staff.

4. Confidentiality Guidelines
4.1. Confidentiality of Participant Information
  • ISFCE will ensure the confidentiality of all participant data, including test submissions, assessment results, and personal information.
  • Only authorized personnel have access to confidential data, and they must sign confidentiality agreements as part of their employment or contract terms.
  • Participant information will not be disclosed to third parties, except in cases where explicit consent has been given (e.g., sharing results with accrediting bodies or employers).

4.2. Data Protection and Security

  • All digital records, including participant data, test results, and correspondence, will be stored securely, with access controls in place to prevent unauthorized access.
  • ISFCE will use encryption and password-protected systems to safeguard data, and regular backups will be conducted to prevent data loss.
  • Any breach of confidentiality or unauthorized data access will be reported and handled according to ISFCE’s incident management procedure.

4.3. Disclosure of Results

  • Assessment results and reports will only be shared with the participant and their employer or accrediting body if explicit permission is granted by the participant.
  • Summarized or anonymized data may be used for internal reports or quality improvement purposes, but individual results will remain confidential unless otherwise agreed.

4.4. Conflict of Interest

  • All personnel involved in the PT program will disclose any potential conflicts of interest. Steps will be taken to ensure that any potential bias or conflict does not affect the fairness and impartiality of the PT process.
  • Individuals with a conflict of interest will not participate in assessments or decisions related to the participants or activities involved in that conflict.

Appeals Process

Below is a summary of the Appeals Process (for details refer tothe “Handling of Appeals Procedure for ISFCE Proficiency Testing Scheme” document.

  • Submit a written appeal to the Proficiency Test Administrator.
  • Include the requestor’s name and contact details in the appeal.
  • The appeal will be reviewed by the Proficiency Test Administrator.
  • Input from the assessor will be sought if necessary.
  • The re-assessment will be completed within 10 business days.
  • The reassessed result will stand as the final outcome.