Specialized Services The RCMP’s specialized and technological services play a critical role in cybercrime investigations. Cybercrime often involves surreptitious online activity, where the right law enforcement skills and tools are required to attribute cybercrime activity to a source, identify possible suspects and handle high volumes of digital evidence, such as terabytes of data from lawfully seized computers, hard drives and mobile devices. Cybercrime investigations differ significantly from traditional criminal investigations. They have a greater requirement for operating in online environments through open source analysis and covert means, and obtaining and analyzing data - and potential digital evidence - to drive investigations. This work is critical to criminal investigations with cyber elements, and will increase in complexity and volume as criminals continue to exploit new and emerging technologies. The RCMP Technical Investigation Services (TIS) is a key part of the RCMP’s specialized services for cybercrime investigations. The TIS provides technical domain expertise and digital forensic services to cybercrime investigations to all levels of policing in Canada, in addition to those involving international policing. The TIS maintains expertise in the forensic investigation of computers and networks, and provides other specialized services, such as expert testimony in criminal court proceedings involving cybercrime investigations. The RCMP Integrated Technological Crime Units (ITCUs) also provide specialized services to cybercrime investigations. ITCUs are strategically located across Canada to respond to cybercrime incidents in collaboration with other domestic and international police services, and often lead cybercrime investigations on behalf of Canada that are national or international in scope. These units also process and analyze digital evidence in support of cybercrime and other criminal investigations, which may involve computer forensics, network systems analysis, data recovery and retrieval, malware reverse engineering, and acquiring operational tools in support of cybercrime investigative techniques. The RCMP’s specialized services also extend to equipping law enforcement with the right training and skills to combat cybercrime. Cybercrime investigations require basic and advanced training to keep pace with criminals in cyberspace. As part of its National Police Services, the RCMP, through the Canadian Police College, provides law enforcement training and educational opportunities on cybercrime investigations and intelligence gathering. The National Police Services are a coordinated and integrated series of programs and services accessible to Canadian law enforcement that assist in the investigation of crime, including cybercrime. 10 Royal Canadian Mounted Police Cybercrime Strategy