Equipment

Training operations designed to teach computer technical skills should be conducted using computers and software likely to be encountered in the field. This single requirement of training operations is one of the costliest parts of the training program. Although computers are relatively inexpensive, periph- erals, software, and upgrades are critical cost items in equipping the training program.

The deployment of computers requires a great deal of thought and prep- aration. The types of computers purchased will depend upon the software and operating systems that will be run upon them and the manner in which that software will be utilized in the lesson plan. There are benefits to pur- chasing the best systems available with the goal of getting the longest life cycle out of those systems. Rapid advances in software programs require constant upgrades and maintenance. An efficiently run training center

Computer Forensics & Investigation: The Training Organization 121 requires imaging software to ensure that the systems can be set up quickly and reloaded quickly before and after class, or during class in the event that a student inadvertently damages the software setup on a system. This requires networking software and hardware designed to restore systems as well as to allow systems to share information and access outside networks.

When designing a computer training lab, careful thought should be given to maintaining the greatest amount of flexibility within the lab. The greater the flexibility, the wider use the lab can be put to. Decisions such as whether or not to use a fixed training center or a mobile training center need to be carefully weighed as well. There are several factors that should be weighed when deciding upon either a fixed or mobile training center.

Fixed training centers have the advantage of being stationary, so the network settings do not change and neither do the requirements for power outlets and phone lines. Fixed audio and video systems and other classroom necessities can be preset. Once set up, they are easily configured and coor- dinated. The layout of the classroom is predictable so instructors and students work in familiar environments.

Mobile training centers add a broader dimension to the training opera- tions in that they can bring advanced training to the field where the need exists. This can generally be done with lower cost to the students or client agencies because the travel costs are borne by the presenter. Even with increased tuition cost to cover the cost of moving a mobile center and the related instructional staff, the cost per student for the training is still reduced, which makes it an attractive alternative to fixed centers.

The design and configuration of a mobile training center presents unique challenges to the training organization. When deployed as a mobile training center, systems must be limited by size, weight, and portability. Additionally, networking issues are increased exponentially whenever the lab is transported to a strange location where it must be integrated into a strange network.

To overcome these issues, mobile training centers are usually networked on a private network and connected through one or more routers using some form of network address translation. Advanced coordination with the host site is required to make this type of system work. Additionally, there are power concerns when bringing 20 to 40 computers onto a site such as a hotel. Computers, monitors, routers, and other peripherals in a single room may overload available power. Again, advanced coordination is essential to the success of the training organization in these situations.

Physical security of the mobile training lab is another area of concern when it is deployed in the field. Hotels do not always secure conference rooms after hours against entry by employees, and thefts may occur. If there are no physical security restraints to prevent equipment theft, uncontrolled access

122 Forensic Computer Crime Investigation

to the training conference rooms may not be desirable. Hotels with the ability to provide physical door lock devices or that are willing to provide the training organization with exclusive access to the conference rooms are desir- able. Training organizations may need to purchase security devices designed to secure the mobile computers onto tables to discourage their removal. Hiring physical security guards locally may also be worthwhile insurance against theft or tampering. Security costs must be set appropriate to the equipment being used.

Peripheral devices are important to both the fixed and mobile training centers. Monitors, keyboards, mice, CD or DVD burners, and printers must be transported or otherwise made available in the classroom. Specifications for purchase of these devices require preplanning to maximize their useful- ness in a wide variety of training scenarios.

The most significant expenses in the computer training center are the cost of software and the appropriate licensing associated with using that software in the training environment. Depending upon the nature of the training program and its impact upon the industry as a whole, software grants and donations can help defray the cost of maintaining a lab. Some software companies provide grant programs designed to assist education and training organizations through the use of software for students. Regardless of whether it is donated or purchased, software licensing must be closely controlled and documented by the training organization.

Specialized or niche market software may be required to provide realistic training in the field. This specialized software is very expensive and may not be available in affordable large quantities unless the training organization has carefully budgeted for the purchase and maintenance of software and licenses. Many of these programs come with copy protection and restricted- use token or dongles, and appropriate licensing must be purchased. The use of these programs should be controlled closely in the classroom.

Software licenses like shareware and freeware must be carefully evaluated to determine whether or not they are applicable to classroom use. Evaluation licenses may provide additional functionality with reduced cost. Another software source is government software that may be available at little or no cost to the training organization. If the training organization has the resources, custom software can be tailored to specific classroom needs but is usually the most expensive option for anything but the smallest utility programs.

As a rule of thumb, the fastest and most advanced computer training lab has a 2-year lifetime if it is used to train field practitioners. Most training organizations will stretch this to 3 years, but attempts to stretch it beyond that result in unrealistic training that has limited application in the field and an inability to demonstrate hands-on application of advanced topics.

Computer Forensics & Investigation: The Training Organization 123