CIDG SERVICE GUIDE

FAQ

What is CCU?

CCU means Cyber Crime Unit. It is a section under Anti-Transnational Crime Division of the Criminal Investigation and Detection Group (ATCD-CIDG). The CCU is capable of Cyber Crime Investigations and Digital Forensics.

Where are the Digital Forensics Laboratories of CIDG?

There are four (4) state-of-the-art Digital Forensics laboratories, manned by competent Digital Forensic Investigators and Examiners, located all over the Philippines. The main laboratory is in Headquarters CIDG, Camp Crame, QC. The regional forensic laboratories can be found at: (1) 9RCIDU, Zamboanga City (2) 11RCIDU, Davao City and (3) 12RCIDU, General Santos City.

What is a Cyber Crime in the Philippines?

The only Cyber Crime in the Philippines

RA 8792 E-Commerce Act - Section 33 A. Penalties

• Hacking or crackling with refers to unauthorized access into or interference in a computer system/server or information and communication system; or any access in order to corrupt, alter, steal, or destroy using a computer or other similar information and communication devices, without the knowledge and consent of the owner of the computer or information and communications system, including the introduction of computer viruses and the like, resulting in the corruption, destruction, alteration, theft or loss of electronic data messages or electronic documents.

• Minimum fine of One Hundred Thousand pesos (P 100,000.00) and a mandatory imprisonment of six (6) months to three (3) years.

What is Digital Evidence?

A.M. NO. 01-7-01-SC.- RE: RULES ON ELECTRONIC EVIDENCE

Acting on the Memorandum dated 18 June 2001 of the Committee on the Revision of the Rules of Court to Draft the rules on E-Commerce Law [R.A. No. 8792] submitting the Rules on Electronic Evidence for this Court’s consideration and approval, the Court Resolved to APPROVED the same.

The Rules on Electronic Evidence shall apply to cases pending after their effectivity. These Rules shall take effect on the first day of August 2001 following their publication before the 20th of July in two newspapers of general circulation in the Philippines.

What is a Digital Forensics?

Computer forensics (sometimes computer forensic science) is a branch of digital forensic science pertaining to legal evidence found in computers and digital storage media. Computer forensics is also known as digital forensics.

The goal of computer forensics is to explain the current state of a digital artifact; such as a computer system, storage medium (e.g. hard disk or CD-ROM), an electronic document (e.g. an email message or JPEG image). The scope of a forensic analysis can vary from simple information retrieval to reconstructing a series of events.

There are five basic steps to the computer forensics:

1. Preparation (of the investigator)
2. Collection (the data)
3. Examination
4. Analysis
5. Reporting

What are the requirements for Examination?

1. Request form by the Investigator, Case Officer or Chief of Office.
2. Submission of Actual evidence in the custody of the Examiner. The Requesting party and the Court with Jurisdiction can pull-out evidence.
3. Additional Hard Drive (normally double or more the Hard Drive for Examination)
4. Addition CD-R for Cellphone Forensics Data Extraction Report.