EnCase Certified Examiner (EnCE) Certification Program
The EnCase™ Certified Examiner (EnCE) program certifies both public and private sector professionals in the use of Opentext™ EnCase™ Forensic . EnCE certification acknowledges that professionals have mastered computer investigation methodology as well as the use of EnCase software during complex computer examinations.
Recognized by both the law enforcement and corporate communities as a symbol of in-depth computer forensics knowledge, EnCE certification illustrates that an investigator is a skilled computer examiner.
EnCE requirements and process
Step 1: Training and experience requirements
You need to have attended 64 hours authorized computer forensic training (online or classroom) OR have 12 months work experience in computer forensics.
Step 2: Complete the EnCE application
Download and complete the application and send it to the Certification Coordinator:
Attn: EnCE Certification Coordinator
1055 East Colorado Boulevard Suite 400
Pasadena, CA 91106-2375
Step 3: Register for test & study guide
- Once the application has been received and approved, you will be contacted by the Certification Coordinator for the test payment, which can be paid by credit card, check, or purchase order.
- The fee to take the EnCE exam with ExamBuilder is $200.00 or International $300.00. The Annual Training Passport does not cover the price of the exam fee.
- If you are attending an EnCE Prep Course, you will receive a confirmation email if your application has been approved.
Step 4: Take phase I (written exam)
- Phase I – Taken with ExamBuilder. You have two (2) hours to complete this test.
- Minimum passing score is 80%.
- Those who fail must wait 60 days prior to retesting.
- You must pay the testing fee again if you fail Phase I. If your organization or personal information changes prior to retesting, you will need to submit a new application.
Step 5: Take phase II (practical exam)
- Those who pass Phase I will be issued an electronic license to complete the Phase II test.
- Sixty (60) days are allotted to complete the Phase II exam.
- Minimum passing score is 85%. The exam has 18 questions. You must answer all questions to your best ability in order for your submission to be considered for grading. Any questions not answered will be marked incorrect and points will be deducted. Any exams submitted that do not meet the minimum completion requirements, will be marked incomplete and you will be required to wait 60 days then restart the EnCE process over at Phase I.
- Those who fail must wait 60 days from the date the test was due before being allowed to retest. A candidate must contact the Certification Coordinator on their eligibility date for retesting. Failure to contact the Certification Coordinator on your eligibility date will require a candidate to start from Phase I of the testing process. If after submitting Phase II you again fail, you must begin the retesting process from Phase I. If a participant’s organization or personal information changes prior to retesting, a new application will need to be submitted.
- Those candidates who do not finish or submit the Phase II exam in the time allotted will be required to wait 60 days from the date that the test was due and restart the testing process from the beginning.
Step 6: EnCE Certification and renewal process
- Those who pass the Phase II test will be notified via email then issued an electronic EnCE Certificate and wallet card.
- EnCE Certifications are valid for three (3) years from the date obtained. Detailed information about the renewal process and submitting renewal credit is available on the EnCE Certification renewal page.
- Please be aware that EnCE holders are responsible for knowing their certification expiration date. Should your certification expire, you will be required to restart the EnCE process from Phase I. Extensions will not be granted. If you are unsure of your expiration date please email EnCaseCertification@opentext.com.
- Contacting any EnCE examiners or trainers while you are undergoing the EnCE testing process (Phase I and II) will be considered cheating and result in immediate failure and exclusion from future testing.