Cyber Crime and Cyber Terrorism

36
CHAPTER 4
Police investigation processes
SARA cycle provides a methodical approach upon which to frame problem solving 
activity. Those officers charged with the responsibility of investigating cyber-related 
crimes would be well advised to adopt such a model which provides confidence and 
clarity to their problem solving decision making processes.
DEVELOPING INVESTIGATIVE HYPOTHESIS
Decisions to effectively progress cyber investigations may have to be based on or 
guided by a hypothesis. For cyber investigations, 
Cook and Tattersall (2010)
 recom-
mend that:
a hypothesis is a proposition made as a basis for reasoning without the assump-
tion of its truth and supposition made as a starting point for further investigation 
of known facts. Developing and using hypothesis is a widely recognised technique 
amongst criminal investigators which can be used to try to establish the most 
logical or likely explanation, theory, or inference for why and how a cyber crime 
has been committed. Ideally, before cyber investigators develop hypothesis there 
should be sufficient reliable material available on which to base the hypothesis 
such as details of the victim, precise details of the incident or occurrence, national 
or international dimensions of the offence, motives of the crime and the precise 
modus operandi (p. 43).
Response
Determining what is to be
done to address and solve
the problem
Assessment
How effective was the
response? What else needs
to be done?
Analysis
Interrogating the problem,
finding out root causes and
characteristics
Scanning
Identifying the problem and
defining its nature and limits
SARA
process