(e) as has been emphasised in Part 1, cybercrime is increasingly transnational in nature. International co-operation is a highly desirable feature of training and is likely to make co-operation easier and more effective in actual practice; (f) while many areas of training focus on cybercrime per se, training in evidence needs to take into account the fact that evidence of almost any type of crime may be found in electronic form. Adequate resources need to be put in place to enable governments to ensure that the standards and procedures adopted will enable the transfer of information, intelligence and most importantly, evidence, in acceptable forms to both sending and recipient jurisdictions. 3.2 Co-ordination of training activities is essential to avoid a continuation of the situation where donors deliver training that they consider to be important, without reference to the needs of the audience or the work of other donors. This wastes scarce resources as well as providing, in many cases, training that is not relevant to the audience. This Part may provide some assistance in identifying an approach to the considered assessment of training needs and in identifying a platform through which future training activities may be co-ordinated in an effective manner. Requirements for skills and knowledge 3.3 As noted in Part 1, the speed of change in technology and its impact on crime are increasing rapidly. The knowledge and skills needed to deal effectively with cybercrime and electronic evidence are manifold and constantly challenged by offender innovations. There is some need for highly trained, skilled and specialised experts, but the extent to which information and communications technologies have become pervasive is such that all criminal justice actors should have at least a basic understanding of such technologies and related problems. At this basic level, the widest audience needs to be able to recognise and deal with the evidence that computers and other digital media may provide in any type of investigation and prosecution. At this level, it should be a fairly simple exercise to introduce elements of relevant training into existing programmes for all within the criminal justice system. 3.4 Beyond a basic general awareness and understanding, there are many different needs. These depend on factors which include the role of each individual, the nature of the institution in which he or she works, and his or her functions within the organisation, the size of the organisation, the volume of cybercrime cases it handles and the degree of specialisation of its personnel (some states choosing to establish dedicated cybercrime units). Depending on these factors, training needs may be focused more on investigative law or evidence law, or on elements such as forensics or the technical skills needed to locate, preserve and seize digital evidence. 3.5 In addition to broad-based general skills training and the training of specialised personnel, specific cybercrime elements may also need to be developed and incorporated into training programmes for specialists in other areas such as organised crime, money laundering or financial and economic crime. In some cases training may be multidisciplinary and be offered to the whole range of criminal justice actors but in other scenarios it may need to be designed and delivered to each professional or institutional group separately. A further consideration, especially for smaller agencies, will be whether training and skills development is intended to be “top-down” and self-sustaining or not. In a very large agency, a cybercrime group, once established, may be largely self-sustaining, able to keep abreast of new developments in technologies and criminal methods, and train newcomers as needed. In small agencies and where case volumes are lower, ongoing training support – sending newcomers abroad for training for example – may be more effective. 40

Select target paragraph3