(i) Establishing the SPF Cybercrime Command 27. The SPF Cybercrime Command was established in December 2015, with the aim of increasing the agility and effectiveness of the SPF to respond to cybercrimes. The Cybercrime Command integrates SPF’s cyber-related investigation, forensics, intelligence and crime prevention capabilities within a single command, thereby improving the coordination and coherence of SPF’s response to cybercrime. This also enables SPF to work together more effectively with other government agencies, industry and the public, in responding nimbly to the constantly evolving nature of cybercrime. For example, analysis of a new cybercrime modus operandi that is shared within the Command can quickly trigger changes in the content of cybercrime prevention messages; this will allow the public to be informed early of the new cybercrime trend. 28. The SPF Cybercrime Command also oversees the Cybercrime Response Teams that are based in every Police Land Division. These teams assist investigation officers in responding to reports of cybercrime, by collecting and processing digital evidence, and conducting forensic analysis of computers and mobile phones. The Cybercrime Response Teams support the Police Land Divisions in responding more quickly and effectively to cybercrime cases. In addition, these teams are trained to recognise when more complex cases require the additional support of the Cybercrime Command’s specialist investigators. 29. The SPF Cybercrime Command also develops the curriculum for SPF’s specialised cybercrime investigation training modules. The Cybercrime Command has incorporated cybercrime modules in the basic training for new Police officers, as well as in the different training courses for investigation officers. Through the modules, SPF investigation officers are equipped with specialised cybercrime investigation skills like email header analysis and the process of recognising, collecting and preserving digital evidence. (ii) Boosting cybercrime investigation capabilities 30. SPF has embarked on several new technology initiatives to improve its cybercrime investigation capabilities. These initiatives will enable SPF to effectively investigate the rising number of cybercrime cases, as well as to process increasingly large volumes of digital information, in order to sieve out necessary evidence for a successful prosecution. 31. One such initiative is the DIGital Evidence Search Tool (DIGEST), which will automate the forensic processing of voluminous data. This will in turn lighten the workload of investigation officers, and enable investigation officers to focus their efforts on more specialised investigation functions. The tool will also reduce the processing time for digital evidence, ensuring that investigation officers can follow up on leads expeditiously, and solve cases in a shorter time. 32. SPF will develop a Video Trawling and Analytics System (VTAS), which will speed up analysis of video footages. With VTAS, investigation officers will be able to quickly search videos for images of interest, based on certain defined parameters. VTAS will also allow for the detection, tracking and recognition of faces, as well as optical character recognition. National Cybercrime Action Plan 11 OF 17