PCI Test Specifications

Domain I. Professional Responsibility [28%]

TASK 1: Analyze case for applicable ethical conflicts.

• Nature/types/categories of ethical issues related to cases (e.g., attorney-client, conflict of interest, fiduciary, potential for dual role bias/discrimination, specific area competency)
• The role of applicable laws, regulations, codes, and organizational policies/administrative guidelines in conducting investigations

TASK 2: Assess case elements, strategies, and risks.

• Case categories (e.g., civil, cyber, criminal, internal, financial, workplace violence)
• Qualitative and quantitative analytical methods and tools
• Strategic/operational analysis
• Criminal intelligence analysis
• Risk identification and impact
• Stakeholder identification

TASK 3: Determine investigative goals and develop strategy.

• Initial projected case type (e.g., administrative, criminal)
• Cost-benefit analysis
• Procedural options
• Case flow / investigative plan
• Investigative methods

TASK 4: Determine and manage investigative resources.

• Resource requirements (e.g., equipment, internal and external liaisons, personnel)
• Resource allocations (e.g., budget, time)
• Case management practices (e.g., chain of custody procedures, documentation requirements, case closure)

TASK 5: Identify, evaluate, and implement investigative process improvements.

• Process improvement techniques (e.g., gap analysis, project management techniques)
• Internal review (e.g., human resources, internal liaisons, legal, management)
• External review (e.g., accreditation agency, external liaisons, regulatory bodies)
• Investigative resources (e.g., administrative records, Open-Source Intelligence (OSINT))
• Investigative tools (e.g., case management software, data collection software, digital forensic software)

Domain II. Investigative Techniques & Procedures [52%]

TASK 1: Conduct surveillance by physical, behavioral, and electronic means.

• Surveillance authorization and restrictions (e.g., legal considerations, types of surveillance)
• Surveillance tools (e.g., analytics, equipment, metadata, software, system logs)
• Pre-surveillance activities (e.g., advance assessment, logistics, planning, resources)
• Procedures for documenting surveillance activities (e.g., case management solutions, privacy concerns, secure storage)

TASK 2: Conduct interviews of individuals.

• Interview types (e.g., subject, witness, person of interest)
• Interview techniques
• Special considerations (e.g., environment, interview subject's mental health, translator, in-person vs. remote)
• Indicators of deception (e.g., evasiveness, non-verbal communication, word choice)
• Subject statement documentation (e.g., audio, video, written)
• Representation considerations (e.g., juvenile advocacy, legal counsel, union representation)

TASK 3: Collect and preserve evidence.

• Sources of evidence (e.g., biological, digital, physical)
• Methods/procedures for collection of various types of evidence
• Methods/procedures for preservation of various types of evidence (e.g., biological, computer operations, digital media)
• Chain of custody considerations and requirements (e.g., physical, digital, biological)

TASK 4: Conduct research by physical, digital, and electronic means.

• Methods of research using physical, information technology, and operational technology resources
• Information sources (e.g., databases, digital media, government, open source, proprietary)
• Methods of analysis of research results
• Research documentation (e.g., findings)

TASK 5: Collaborate with and obtain information from other agencies and organizations.

• External information sources
• Liaison development and maintenance
• Liaison techniques (e.g., formal, informal)
• Techniques for using and synthesizing external information (e.g., documented vs. undocumented, protecting sources and sensitivities, redacting)

TASK 6: Use investigative techniques.

• Legal, administrative, and organizational considerations
• Concepts, principles, and methods of video/audio recordings
• Concepts, principles, and methods of forensic analysis (e.g., biological, digital, physical)
• Concepts, principles, and methods of undercover investigations
• Concepts, principles, and methods of threat and risk assessments
• Concepts, principles, and methods of applying IT/OT technologies
• Use of confidential sources

Domain III. Case Presentation [20%]

TASK 1: Prepare report to substantiate investigative findings.

• Critical elements and format of an investigative report (e.g., audience/legal considerations, addressing privacy and confidentiality, types of report)
• Investigative terminology
• Logical sequencing of information

TASK 2: Prepare and present testimony.

• Types of testimony (e.g., administrative hearings, criminal and civil proceedings, depositions)
• Preparation for testimony (e.g., pre-trial rehearsal)
• Testimony best practices