Sharpen your competitive edge

Certification pricing is $500 USD. Certification renewals will be offered at 50% off the list price ($250 USD after discount) if the renewal requirements and submissions are completed prior to the expiration of the existing certification. All OpenText certifications are valid for three years. Our certification programs are led by industry pioneers that help advance the careers of over 60,000 expert forensic investigators who consider EnCase technology as the gold standard in the industry.

Choose your certification path:

Questions? Email the EnCase Training team or call +1-626-463-7966.

Certified Forensic Security Responder (CFSR) certification

Learn the fundamentals of how to conduct thorough, professional, incident investigations from OpenText™ cybersecurity experts who will guide you step-by-step through the process and certify your new-found knowledge.

Program benefits

The Certified Forensic Security Responder (CFSR) certification illustrates that an investigator is a skilled incident responder. It acknowledges professionals who have mastered the necessary skills to prepare for cyberattacks, perform attack detection, validate and prioritize alerts, and contain cyber incidents. In addition, it demonstrates the professional's ability to conduct root-cause analysis, manage a cyber breach remediation process, and evaluate lesson learned.

CFSR requirements and process

Step 1: Training and experience requirements

Candidates for the CFSR are required to attend the OpenText IR250-Incident Investigation and DFIR370-Host Intrusion Methodology and Investigation courses or have 12 months of experience in the field of incident investigations.

Step 2: Complete the CFSR application

Download and complete the application and submit the application with supporting documents to encasecertification@opentext.com.

Step 3: Register for test

Once the application has been received and approved, you will be contacted by the certification coordinator to register for the exam. The invoice will be sent to the email address listed on the registration form. Payment instructions will be listed on the last page of the invoice. The testing fee is $500.00 USD. The OpenText Learning Subscriptions do not include the price of the exam fee.

Step 4: Take Phase I (written exam)

After your exam fee is paid, a training account will be created for you along with the certification exam link. You’ll receive an email from the certification coordinator and the learning services team with your account information and testing instructions.

The Phase I written exam is a true/false, multiple-choice test taken through Certiverse. You will have two and a half hours to complete this test which consists of 200 questions. Minimum passing score is 80%. Be aware that when you take the Phase I test, you are committing to taking the Phase II test directly after.

Those who fail must wait 60 days prior to retesting. If your organization or personal information changes prior to retesting, you will need to submit a new application.

Contacting any CFSR examiners or trainers while you are undergoing the CFSR testing process will be considered cheating and result in immediate failure and exclusion from future testing.

Step 5: Take Phase II (practical exam)

Those who pass the Phase I test will be provided with the Phase II test through the OpenText Learning Platform. Minimum passing score is 80%. If the minimum passing score is not achieved on the first attempt, participants may retake the test after a waiting period of 60 days. They must contact the certification coordinator to schedule their second attempt. Failure to do so will require restarting the certification process from Phase I. If the minimum passing score is not achieved after the second attempt, the participant must also restart from Phase I.

CFSR renewal requirements and process

CFSR certifications are valid for three years from the date obtained. The cost to renew your CFSR certification is $250.00 USD if the renewal process begins before expiration.

CFSRs are responsible for knowing their certification expiration date. Should your certification expire, and the requirements are not fulfilled before the expiration date, you will be required to restart the CFSR process from Phase I, and the cost is $500.00 USD. Extensions will not be granted. If you are unsure of your expiration date, please contact us.

Step 1: Training and experience requirements

To renew the CFSR, CFSR holders are required to achieve one of the following items prior to their expiration date to renew:

  • Attend a minimum of 32 Continuing Professional Education (CPE) credit hours of documented, continuing education in computer forensics or incident response to maintain the certification.
  • The training should either be from OpenText, your agency, or an accredited source. Training should be either in a classroom lab setting or online. You must provide proof of attendance via a certificate, transcript, or official letter. You can earn one credit hour for each classroom hour of training and a half credit hour for each one hour of instruction as a computer forensics or incident response curriculum instructor.
  • If you attend any computer forensic conference, here are the guidelines for submitting renewal credit.
    • Only labs count (we don't count seminars or product demos).
    • You can count one CPE credit or every hour you are in a lab.
    • To submit credits, please send a copy of the conference agenda and indicate the labs attended and how many CPE credits each one is worth.
  • Training and teaching hours may be combined to reach the total 32 hours required. Documentation may be a certificate of completion, official letter from the provider, or transcript. EnCase OnDemand training is acceptable training to renew the CFSR certification.
  • Achieve a computer forensics or incident response related certification within the renewal period. *Documentation needs to be a certificate of completion.

Step 2: Complete the CFSR renewal form

Download and complete the application and submit the application with supporting documents to encasecertification@opentext.com.

Step 3: Submitting your renewal form and documents

Please do not submit your renewal documents separately. Keep all certificates together and only send them when you have the requirement fulfilled. When you are ready, send this form and any certificates, letters, or documents to encasecertification@opentext.com.

Once your renewal has been submitted and approved, your renewal date will be changed to a three-year period. Example: If you are renewing in 2026, your next renewal date will be in 2029 and every three years from then on.

Step 4: Payment process

Once the application for renewal is received and approved, the certification coordinator will send payment instructions for the renewal fee via email.

CFSR certifications are valid for three years from date obtained. Detailed information about the renewal process and submitting renewal credit is available on the CFSR certification renewal page.

Please be aware that CFSR examiners are responsible for knowing their certification expiration date. Should your certification expire, you will be required to restart the CFSR process from Phase I. Extensions will not be granted. If you are unsure of your expiration date, please email: encasecertification@opentext.com.

Apply | Renew

EnCase Certified Examiner (EnCE) Certification Program

The EnCase™ Certified Examiner (EnCE) program certifies both public and private sector professionals in the use of Opentext™ EnCase™ Forensic. EnCE certification acknowledges that professionals have mastered computer investigation methodology as well as the use of EnCase software during complex computer examinations.

Recognized by both the law enforcement and corporate communities as a symbol of in-depth computer forensics knowledge, EnCE certification illustrates that an investigator is a skilled computer examiner.

EnCE requirements and process

Step 1: Training and experience requirements

You need to have attended 64 Continuing Professional Education (CPE) hours authorized computer forensic training (online or classroom) OR have 12 months work experience in computer forensics.

* EnCase OnDemand Training is acceptable training to fulfill the EnCE certification requirement.

Step 2: Complete the EnCE application

Download and complete the application and e-mail it to EnCaseCertification@opentext.com.

Step 3: Register for test & study guide

Once the application has been received and approved, you will be contacted by the Certification Coordinator for the test payment, which can be paid by credit card, check, or purchase order. The fee to take the EnCE exam with Certiverse is $500.00. The OpenText Learning Subscriptions do not include the price of the exam fee. If you are attending an EnCE Prep Course, you will receive a confirmation email if your application has been approved.

Step 4: Take phase I (written exam)

  • Phase I - Taken with Certiverse. You have two (2) hours to complete this test.
  • Minimum passing score is 80%.
  • Those who fail must wait 60 days prior to retesting.
  • You must pay the testing fee again if you fail Phase I. If your organization or personal information changes prior to retesting, you will need to submit a new application.

Step 5: Take phase II (practical exam)

  • Those who pass Phase I will be issued an electronic license to complete the Phase II test.
  • Sixty (60) days are allotted to complete the Phase II exam.
  • Minimum passing score is 85%. The exam has 18 questions. You must answer all questions to your best ability in order for your submission to be considered for grading. Any questions not answered will be marked incorrect and points will be deducted. Any exams submitted that do not meet the minimum completion requirements will be marked incomplete and you will be required to wait 60 days then restart the EnCE process over at Phase I.
  • Those who fail must wait 60 days from the date the test was due before being allowed to retest. A candidate must contact the Certification Coordinator on their eligibility date for retesting. Failure to contact the Certification Coordinator on your eligibility date will require a candidate to start from Phase I of the testing process. If after submitting Phase II you again fail, you must begin the retesting process from Phase I. If a participant’s organization or personal information changes prior to retesting, a new application will need to be submitted.
  • Those candidates who do not finish or submit the Phase II exam in the time allotted will be required to wait 60 days from the date that the test was due and restart the testing process from the beginning.

Step 6: EnCE Certification and renewal process

  • Those who pass the Phase II test will be notified via email and then issued an electronic EnCE Certificate and wallet card.
  • EnCE certifications are valid for three (3) years from the date obtained. The cost to renew your EnCE certification is $250.00 USD if the renewal process begins before expiration. Renewal applications received after the certification expiration date will be invoiced for $500.00 USD.
  • EnCE holders are responsible for knowing their certification expiration date. Should your certification expire, and the requirements are not fulfilled before the expiration date, you will be required to restart the EnCE process from Phase I and the cost is $500.00. Extensions will not be granted. If you are unsure of your expiration date please email EnCaseCertification@opentext.com.

Apply | Renew

EnCase Certified eDiscovery Practitioner (EnCEP) Program

The EnCase™ Certified eDiscovery Practitioner (EnCEP) program certifies private- and public-sector professionals in the use of the OpenText™ EnCase™ Information Assurance software as well as their proficiency in eDiscovery planning, project management, and best practices, spanning legal hold to load file creation. EnCase Information Assurance is the leading eDiscovery solution for the search, collection, preservation, and processing of electronically stored information (ESI).

Earning the EnCEP certification illustrates that a practitioner is skilled in the application of the solution to manage and successfully complete all sizes of electronic discovery matters in accordance with the Federal Rules of Civil Procedure.

EnCEP requirements and process

Step 1: Training and experience requirements

You need to have attended the live eDiscovery with EnCase Information Assurance course AND have three months of work experience in electronic discovery collection, processing, and/or project management.

Step 2: Complete the EnCEP application

Download and complete the application and email it to EnCaseCertification@opentext.com.

The cost of the test is $500.00 USD, which includes:

The EnCEP examination delivered online with Certiverse. Electronic copy of the EnCEP certificate and wallet card upon successful completion of the program.

Step 3: Register for test

Once the application has been received and approved, you will:

  • Be notified and directed to register online to begin the invoicing process.
  • Invoices will be sent to you from our OpenText Billing Department.
  • Payment methods (credit card, check, or purchase order) and instructions are included on the invoice.
  • Receive an email with the registration information to take the EnCEP test online.

Step 4: Take the written exam

  • With the information provided by the Certification Coordinator, log onto Certiverse to take the computer-based written exam. You will have two (2) hours to complete the test.
  • Minimum passing score is 80%.
  • If your organization or personal information changes prior to retesting, you will need to submit a new application.
  • If you do not pass this test, you can retake the test within 30 days. If you are not successful on the second attempt, you will need to wait 60 days before reapplying for the EnCEP certification and pay the testing fee.
  • Contacting any EnCEP examiners or trainers while you are undergoing the EnCEP testing process will be considered cheating and result in immediate failure and exclusion from future testing.

Step 5: EnCEP Certification and renewal process

  • Those who pass the EnCEP exam will be notified via email and issued an electronic EnCEP certificate and wallet card.
  • EnCEP certifications are valid for three years from date obtained. The cost to renew your EnCEP certification is $250.00 USD if the renewal process begins before expiration.
  • EnCEP holders are responsible for knowing their certification expiration date. Should your certification expire, and the requirements not fulfilled before the expiration date, you will be required to restart the EnCEP process from the examination and the cost is $500.00 USD. Extensions will not be granted. If you are unsure of your expiration date, please email EnCaseCertification@opentext.com.
  • If you have any questions regarding EnCEP, please contact EnCaseCertification@opentext.com.

Apply | Renew