ISC2 Certified Cyber Forensics Professional® (CCFP®)

As a Certified Cyber Forensics Professional you'll understand and show competence in established disciplines as well as new challenges, such as mobile forensics, cloud forensics and anti-forensics.

The CCFP certification demonstrates your expertise in forensic techniques and procedures. With your knowledge, you'll be able to present complete and reliable digital evidence admissible to a court of law.

You'll learn about the six domains of CCFP:

• Legal and Ethical Principles
• Investigations
• Forensic Science
• Digital Forensics
• Application Forensics
• Hybrid and Emerging Technologies

The certification also indicates your ability to apply forensics to e-discovery, malware analysis and incident response. On the CCFP course you'll get hands-on experience and prepare a report on evidence analysis at the end.

ISC2 Premier Training Partner

At Firebrand, we are proud to be an Official Training Premier Partner of ISC2 for 2025 in recognition of our commitment to delivering world-class training, certification, and professional development opportunities for Cybersecurity professionals.

The CCFP consists of the following six domains:

Legal and Ethical Principles

This domain addresses ethical behavior and compliance with regulatoryframeworks.

• Nature of Evidence
• Chain of Custody
• Rules of Procedure
• Role of Expert Witness
• Codes of Ethics

Investigations

This domain encompasses the investigative measures and techniques required to gather digital evidence.

• Investigative Process
• Evidence Management
• Criminal Investigations
• Civil Investigations
• Administrative Investigations
• Response to Security Incidents
• e-Discovery
• Intellectual Property

Forensic Science

This domain entails applying a broad spectrum of sciences and technologies to investigate and establish facts in relation to criminal or civil law.

• Fundamental Principles
• Forensic Methods
• Forensic Planning & Analysis
• Report Writing & Presentation
• QA, Control, Management
• Evidence Analysis Correlation

Digital Forensics

This domain refers to the collection of any digital evidence which can be defined as data stored or transmitted via electronic means.

• Media & File System Forensics
• Operating Systems Forensics
• Network Forensics
• Mobile Devices
• Multimedia & Content
• Virtual System Forensics
• Forensic Techniques & Tools
• Anti-Forensic Tech & Tools

Application Forensics

This domain addresses the forensics complexities of the many application types that a CCFP candidate may encounter during a forensic investigation.

• Software Forensics
• Web, Email, Messaging
• Database Forensics
• Malware Forensics

Hybrid and Emerging Technologies

This domain contains the ever-evolving technologies that a CCFP candidate will be expected to understand.

• Cloud Forensics
• Social Networks
• Big Data Paradigm
• Control Systems
• Critical Infrastructure
• Virtual/Augmented Reality

In order to get your CCFP certification you must have a four-year Bachelor's degree, or regional equivalent, as well as three years of full-time IT security or digital forensics experience in three out of the six domains of CCFP. If you do not hold a four-year Bachelor's degree, you must have six years of full time experience in three out of six domains.

If you have a different forensics certification approved by ISC2®, you may get a one-year professional experience waiver.

This accelerated CCFP course will prepare you for the following exam. The exam voucher is included in the course price. If you wish to take the exam, we'll provide guidance on how to book your seat at a Pearson Vue testing centre.

• Certified Cyber Forensics Professional: CCFP - CCFP-EU