Cyber Crime and Cyber Terrorism

32
CHAPTER 4
Police investigation processes
computers and networks (HM 
Government, 2011
). Cyber criminals are also continu-
ally adapting their tactics as new defenses are implemented. To counter new cyber 
criminal activities, law enforcement agencies must continue their efforts to ensure 
cyber space is a hostile environment for them to operate.
The complex nature and sophistication of cyber crime and cyber terrorism de-
mands a dedicated response, especially from investigators who are critical to the suc-
cess of tracking cyber criminals and bringing them to justice. Therefore, this chapter 
shall focus upon the role of the cyber investigator, addressing the challenges they 
encounter and the methods, models and investigative doctrine they should use to 
become an effective cyber detective. Although this chapter does not focus on the 
technical role and responsibility of those specialist hi-tech investigators, it will pro-
vide them with the tools and techniques to develop their core investigative skills. This 
chapter shall also serve as a timely reminder for the police officer and traditional 
criminal detective investigator, many of whom now find themselves thrust into inves-
tigating online crimes with little or no training and experience in this domain.
This chapter consequently considers five pertinent areas of core investigative 
competencies which provide the foundations upon which professional cyber investi-
gations, indeed all criminal investigations, should be conducted. The key investiga-
tive skills of decisions making, problem solving, developing hypothesis, embracing 
innovation, and the importance of contact management are all explored in the context 
of contemporary cyber investigations.
INVESTIGATIVE DECISION MAKING
Making sound judgments is a core role and important attribute of any successful 
cyber investigator, particularly those Senior Investigating Officers (SIO) charged 
with the responsibility of managing and directing large-scale investigations. Effective 
decision making, particularly at the very outset of cyber investigations, will ensure 
opportunities are not missed and potential lines of enquiry are identified and rigor-
ously pursued. In reality, law enforcement officers who are engaged in the early 
developments of an investigation do have to cope with a lack of sufficient informa-
tion to begin with, and some important decisions may need to be made quickly and 
intuitively. According to 
Cook and Tattersall (2010)
A key skill involves the tenacity of the investigator being able to recognise when 
there is insufficient time to gather further information. Intuition however, de-
rives from knowledge and experience and can be prone to bias, therefore in-
vestigative decisions must always be based on reasoning and analysis to avoid 
subjectivity (p. 33).
The commencement of a cyber-based investigation, especially any complex in-
vestigation which may be high profile and is being conducted under the glare of the 
media will be frenetic. Nothing should prevent the professional cyber investigator 
from being able to progress their tasks at a pace which ensures they can perform their 

---