icon icon

Digital data security – capturing, analysing, reporting and protecting data

icon

Training process

Training needs analysis

If you have specific requirements regarding the training programme, we will carry out a training needs analysis for you. This will guide us on which aspects of the programme should receive greater emphasis, so that the training programme meets your specific needs.

What will you gain?

icon

Effective data collection - You will learn how to locate relevant data sources, search efficiently, and import data safely, so you can start working with complete, organized material from the very beginning.

icon

Reliable media preservation - You will learn how to clone and image storage media, choose suitable file formats, and create binary copies in a way that preserves data integrity and reduces the risk of loss.

icon

Triage response skills - You will practice securing data with the Triage approach and making sound decisions under time pressure, when you need to quickly identify the most valuable digital sources and traces.

icon

Handling cloud-based data - You will understand how to identify and preserve data stored in cloud services and how to include it in your analysis when information is spread across devices, platforms, and accounts.

icon

Structured data analysis - You will learn how to prepare material for analysis, define a clear methodology, process collected data, and interpret findings correctly so your conclusions are reliable and useful.

icon

Recovering hidden information - You will explore ways to recover both structured and unstructured data, increasing your chances of finding important information even when the source is damaged, incomplete, or complex.

icon

Browser trace analysis - You will be able to examine cookies, browser file structures, and the impact of private mode, which will help you reconstruct user activity more accurately in web environments.

icon

Reporting and data governance - You will learn how to build clear reports, present findings, and plan archiving, access control, and data quality practices so your results remain useful long after the analysis ends.

Training programme

1. Data – introduction

Digital data is positioned here as the common subject linking collection, preservation, access, analysis, and reporting. This opening section establishes the overall context of working with information in organizational and technical settings, preparing the ground for later operational topics.

2. Obtaining digital data

Obtaining digital data begins with identifying viable sources, then searching, importing, and handling material without compromising security. The section frames acquisition as a controlled process, so data can be collected efficiently while preserving usability and basic protection requirements.

  • where to get data from,
  • how to search,
  • how to import,
  • security.

3. Data securing

Securing digital evidence involves more than copying files, especially when source media, disk protections, or cloud resources are involved. Participants work through cloning, imaging, binary copies, post-mortem acquisition, Triage-based securing, and the role of file formats and tools.

  • cloning and imaging of media,
  • post-mortem securing,
  • file formats,
  • binary copies – tools and software,
  • securing using the Triage method,
  • disk protections,
  • data in the cloud.

4. Data analysis

From the first preparation steps to final interpretation, analytical work requires a defined methodology and controlled processing. This part organizes the sequence of analysis, helping participants connect preparation choices with processing logic and the meaning of resulting findings.

  • preparation for analysis,
  • determination of methodology,
  • processing,
  • interpretation.

5. Data recovery

When information is missing or damaged, recovery methods differ depending on whether original structure is preserved. The training distinguishes work on structured data from recovery without structure, clarifying the technical implications of each approach and expected limitations.

  • with structure,
  • without structure.

6. Web browsers

Web browsers leave traces that can matter during examination of digital activity and user behavior. The section covers cookies, browser-related file structures, and private mode, with attention to what these elements reveal and how they affect available data.

  • cookies,
  • file structure,
  • private mode.

7. Data reporting

Effective reporting turns processed information into a form that supports review and decision-making. The focus here is on reporting principles, building reports that match the intended purpose, and presenting results in a clear, structured, and professionally usable way.

  • principles,
  • creating reports,
  • presentation.

8. Data storage and archiving

Long-term retention starts with choosing appropriate data carriers and defining how information is archived in the organization. The section links storage strategy with protection against data loss, showing how retention, accessibility, and resilience must be balanced over time.

 

  • types of data carriers,
  • data archiving in organizations,
  • long-term data storage strategy,
  • protection against data loss.

 

9. Data access management

Controlling who can view or modify information requires clear roles, permissions, and identity management. Attention is also given to access control mechanisms and monitoring practices that make data usage traceable and help detect unauthorized or excessive access.

 

  • roles and permissions,
  • access control,
  • monitoring access to data,
  • identity management.

 

10. Data quality management

Reliable datasets depend on disciplined validation, verification, and cleaning before they are used further. This section also addresses master data management and the controls needed to maintain integrity and consistency across records, sources, and organizational processes.

 

  • data validation and verification,
  • data cleaning,
  • master data management,
  • ensuring data integrity and consistency.

 

11. Training summary

The closing segment consolidates the full workflow from acquisition and protection to analysis, reporting, and governance. It is used to connect operational decisions with data quality, access control, storage, and recovery, so the end-to-end process can be assessed as one coherent practice.

What are the prerequisites for participating in the training?

icon

Computer literacy - You should be comfortable working in an operating system, managing files and folders, and installing or launching basic tools used for handling and reviewing data.

icon

Storage basics - You should understand the differences between disks, USB drives, and network resources so you can follow data sources more easily and secure them in a correct way.

icon

Security fundamentals - You should know the basic rules of safe data handling, including access protection and caution when copying files, so you do not compromise data integrity.

icon

Analytical thinking - You should be able to organize information, draw conclusions from data, and work step by step according to a procedure, because the training includes analysis and interpretation.