Skip to main content

eDiscovery Certification Council

Training / CEFIP
Professional Training • Practical • Vendor-Neutral

Certified eDiscovery & Forensic Investigation Practitioner (CEFIP) Training

Learn to collect, preserve, analyse and defend digital evidence across the investigation-to-discovery lifecycle.

30 HoursSelf-paced optionPractical learningCertification pathway
30 HoursFocused professional learning
Vendor-NeutralTransferable knowledge and workflow skills
FlexibleSelf-paced online learning option
ProgressiveContinue toward eDCC certification
Why take this course?

Learn something you can use, explain and build on.

CEFIP connects digital forensics with eDiscovery so that technical evidence work is understood in the context of investigations, disputes and legal scrutiny.

Learn at your pace

Work through the subject in a structured sequence and revisit difficult areas instead of relying on fragmented reading.

Apply the knowledge

The programme emphasises practical workflows, decisions and professional judgement rather than theory in isolation.

Build career capital

Add a specialist body of knowledge to the experience you already have—or use it to enter a new area with stronger foundations.

Speak the language

Learn the terminology and concepts needed to collaborate more effectively with legal, IT, forensic, review and project teams.

Avoid vendor lock-in

Focus on transferable principles and workflow decisions that remain relevant as software and platforms change.

Finish with a next step

Continue from learning into the corresponding eDCC certification when you want to validate the knowledge you have developed.

Learning outcomes

What you should be able to do afterwards

The goal is not simply to complete lessons. It is to leave with a clearer professional framework for making and explaining decisions.

Perform forensically sound collection and preservation
Maintain defensible chain of custody and integrity records
Recognise deleted, hidden and system-level artefacts
Connect forensic outputs to eDiscovery processing and review
Know when forensic escalation is required
Prepare evidence and documentation to withstand challenge
Course structure

A clear route through the subject

01Digital forensics & eDiscovery
02Legal and ethical frameworks
03Investigation process
04Acquisition & preservation
05File systems & storage media
06Forensic analysis
07OS, network, email & mobile forensics
08eDiscovery workflows
09Reporting & presentation

Designed for

Digital investigators, forensic practitioners, eDiscovery technicians, analysts and professionals who handle digital evidence.

Format: eCourseware / self-paced online, with instructor-led delivery where available.

Indicative duration: 30 Hours

How to get the most from it

  • Work through modules in sequence.
  • Relate each concept to a matter or workflow you know.
  • Use the Knowledge Hub only when you want deeper context.
  • Review difficult areas before sitting the certification exam.
  • Return to the material as your practical experience grows.

Learning only

If your priority is knowledge and practical development, enrol in the course and work through it at your own pace.

Buy the Course

Learning + professional validation

If you also want a credential that makes your knowledge easier to recognise, add the corresponding certification exam.

View Course + Exam Options
Optional reading

Explore the subject without leaving the buying journey

These short Knowledge Hub guides can help you deepen your understanding before or after enrolment. You do not need to read them before you buy.

Digital Evidence: A Complete Guide →Chain of Custody for Digital Evidence →eDiscovery vs Digital Forensics →
Questions before you enrol

Frequently asked questions

Do I need to read the linked articles before enrolling?

No. They are optional supporting resources. The course is designed as the structured learning path; the articles are there when you want additional context.

Is this training vendor-specific?

No. The eDCC programme is positioned as vendor-neutral, although relevant technologies and platforms may be discussed as part of real-world practice.

Can I continue to certification?

Yes. The corresponding eDCC certification pathway allows you to move from structured learning into formal validation of your knowledge.

Will the course guarantee a career outcome?

No training course can guarantee employment or promotion. It is designed to strengthen your knowledge, confidence and professional capability.

Make the next 30 Hours count.

Learn to collect, preserve, analyse and defend digital evidence across the investigation-to-discovery lifecycle.

Enrol in CEFIP