skip to main content

Certified Forensic Security Responder Certification Program (CFSR) - U.S.

Have questions about training?   Contact us


Learn the fundamentals of how to conduct thorough, professional, incident investigations from OpenText cyber security experts who will guide you step-by-step through the process and certify your new-found knowledge.

The CFSR certification illustrates that an investigator is a skilled incident responder. It acknowledges professionals who have mastered the necessary skills to prepare for cyber-attacks, perform attack detection, validate and prioritize alerts and contain cyber incidents. In addition, it demonstrates the professional’s ability to conduct root cause analysis, manage a cyber breach remediation process, and evaluate lesson learned.


Cyber security experts in the public and private sector


Candidates for the CFSR are required to attend the EnCase Incident Investigation and Host Intrusion Methodology and Investigation courses or have 12 months experience in the field of incident investigations.



STEP 1: Candidates for the CFSR are required to attend the EnCase Incident Investigation and Host Intrusion Methodology and Investigation courses or have 12 months experience in the field of incident investigations.

STEP 2: Complete the CFSR Application Download and complete the application and send it to the Certification Coordinator:

    OpenText Attn: Certification Coordinator 1055 East Colorado Boulevard Suite 400 Pasadena, CA 91106-2375

STEP 3: Register for Test & Study Guide

  • Once the application has been received and approved, you will be contacted by the Certification Coordinator for the test payment, which can be paid by credit card, check, or purchase order.
  • The testing fee is $250 USD for the U.S. or $300 USD internationally. The Annual Training Passport does not cover the price of the exam fee.

STEP 4: Take Phase I (Written Exam)

  • The Phase I written exam is a true/false, multiple-choice test taken through ExamBuilder. You will have two and half hours to complete this test.
  • Minimum passing score is 80%.
  • Those who fail must wait two months prior to retesting. If your organization or personal information changes prior to retesting, you will need to submit a new application.

STEP 5: Take Phase II (Practical Exam)

  • Those who pass the Phase I test will be provided with the Phase II test through ExamBuilder.
  • Minimum passing score is 80%.
  • If the minimum passing score is not achieved, participants will be given one opportunity to resubmit their Phase II exam for regrading. Those who do not achieve the minimum passing score after the second submission must wait two months before retesting; an eligibility date is provided via email. A participant must contact the Certification Coordinator on their retest eligibility date. Failure to contact the Certification Coordinator on your eligibility date will require a participant to start from Phase I of the testing process. If the minimum score is not reached after retaking Phase II, you must begin the retesting process from Phase I.

STEP 6: EnCE Certification and Renewal Process

  • CFSR certifications are valid for three years from date obtained.
  • CFSRs are required to achieve one of the following items prior to their expiration date in order to renew.
  • Attend a minimum of thirty-two (32) credit hours of documented, continuing education in computer forensics or incident response to maintain the certification.
  • Achieve a computer forensics or incident response related certification within the renewal period.
  • Attend 10 sessions (labs or lectures) at one Enfuse conference within the renewal period.

CFSRs are responsible for knowing their certification expiration date. Should your certification expire, you will be required to restart the CFSR process from Phase I. Extensions will not be granted. If you are unsure of your expiration date, please email Contacting any OpenText EnCase trainers while you are undergoing the testing process (Phase I and/or II) will be considered cheating and result in immediate failure and exclusion from future testing.


Format Currency Price
Per Student Online USD  250.00 

Taxes: All prices exclude VAT or other taxes where applicable (all currencies).

Extra expenses: Customer site course prices do not include instructor travel expenses, which are billed separately.

Reservations: Please provide a minimum of 3 weeks advance notice when arranging courses at customer sites.

Course & Workshop Calendar

Below is a listing of all the currently available dates and locations for this course or workshop from OpenText.

To register, please select the course you want to attend by clicking the "Add to cart" button.

Date Course type Course name Language Location Price Add
  Web-based  Certified Forensic Securi  English  Web-based 250.00  Add to cart