Course Finder


Certified Cybercrime Investigator (CCI)

Certificate programme – Online course

Registration Introduction Highlights Programme Content Key Facts Contact


We are currently updating our course on Cybercrime Investigation for you.

Would you like to receive updates about the registration process as well as the contents and organisation of the updated course? Register here as a prospect - free of charge and non-binding

The term ‘cybercrime’ regularly features in the news and shows just how versatile and inventive individual perpetrators and the criminal industry are: phishing, CEO fraud, data theft, unrecognised or obscured money transfers, hacking IT systems in connection with ransom demands and much more. The use of security software, incident management and awareness training are all good countermeasures used by companies.

But what should be done if there is a suspicion that a cybercrime has been committed? Who leads the investigations? Who coordinates the cooperation with other divisions and national law enforcement authorities? Nowadays, experts are needed more than ever before.

Combination of knowledge and applied learning

The Certified Cybercrime Investigator (CCI) aims to provide participants with the required knowledge and skills to investigate cybercrime attacks. The course consists of various modules covering a wide range of topics and is ideally aligned with practical requirements. It promotes the development of skills through a combination of knowledge and applied learning.


You will learn the methods with which cyber criminals work. You will learn how to secure evidence at the scene of a digital crime and how to investigate in practice. You will experience how to incorporate and coordinate internal departments and national law enforcement authorities in your investigative work.

Once you have completed this certificated course of study, you will have developed an expert level of professionalism as a contact person for internal investigations and as an intermediary between the Compliance, Risk Management, Legal, HR, IT and Communications departments.

The Certified Cybercrime Investigator is designed as a purely online course and can therefore be accessed individually at any time via our online campus.

Programme Content

The Certified Cybercrime Investigator consists of 6 modules and lasts around 10 months. In total, you will need about 90 hours of study. This way, we can make sure that you can optimally combine learning with your professional commitments. You work through the modules sequentially, one after the other. Every module is concluded with an online multiple-choice test and working on a case study.

Onboarding (Module 1)

The learner will firstly be introduced to the course to familiarise himself with the online campus and its provided eLearning tools. Finally the learner will explore basic cybercrime offences and what cybercrime investigation entails.

More information about the module Onboarding

Fundamentals of Cybercrime (Module 2)

The learner understands the basics of cybercrime and can describe key actors, aims and methods used by cyber criminals.

More information about the module Fundamentals of Cybercrime

Cybercrime Investigation (Module 3)

The learner should understand how to approach a "digital" crime scene: How should and can evidence be preserved without putting limitations on the investigation and criminal prosecution process? They will learn how to formulate useful initial hypotheses, which he/they will need for the subsequent investigation. They will be able to determine an appropriate scope for their investigation and define necessary measures and measures to be undertaken in collaboration with internal and external assisting parties. He/she will also learn about different investigative methods which differ from and complement those used in the course of a public prosecutor's investigation.

More information about the module Cybercrime Investigation

Detection and Response – part one (Module 4)

The learner can apply their knowledge of cybercrime and describe key case types from the perspective of the cybercriminal and the investigator.

More information about the module Detection and Response – Part 1

Detection and Response – part two (Module 5)

The learner can recognise the key traces left behind by instances of cybercrime and understands which relevant forensic and investigative tools need to be used in order to gather information about and analyse these instances.The learner can apply their basic knowledge to a practical case.

More information about the module Detection and Response – Part 2

Legal Prosecution and Judicial Proceedings (Module 6)

The learner will focus on criminal investigations and the prosecution of cybercrime offences. They will also tackle issues that were addressed during their investigative activities (Module 3). This module focuses on considering in what way and at what point public law enforcement authorities can be involved as well as in what way and at what point collaboration with the law enforcement authorities of other countries should be initiated. As cybercrime offences are typical of a global nature, the learner will expand his/her legal and practical knowledge regarding investigative efforts and the prosecution process.

More information about the module Legal Prosecution and Judicial Proceedings

Key Facts


Certified Cybercrime Investigator (CCI) (Frankfurt School of Finance & Management)

Target Group

The course is ideal for professionals from the areas

  • cyber defence
  • IT / cyber security
  • corporate security
  • fraud management
  • internal investigators
  • internal auditors who want to improve their knowledge of detecting and preventing cybercrime.


Participants must have sufficient command of the English language to complete the online certificated course of study: All content is provided in English and the language of instruction is English. The key requirement is that the applicant must be able to read in English, work together with other course participants from across Europe and prepare a case study analysis in English. Grammatical and spelling errors will not affect the learner's grade.

Certification Requirements

  • Successful completion of 6 online tests (Modules 1 - 6)
  • Preparation of 5 case studies (Modules 2 - 6). The proposed solutions must be prepared within 4 weeks. They will then be graded and discussed during a web conference. At least four out of the five assignments must be marked as "successfully completed" in order for the learner to meet the requirements for certification.
  • The learner will have met the requirements for certification when they have "successfully completed" all 6 online tests and 4 out of 5 case studies. The certificate does not state any specific grades in order to take into account the learners' increasing competencies in the course of further training.


12 ECTS credits (European Credit Transfer System)


Total fee, including the exam and the certification: 6,800 Euros

All amounts are exempt from VAT.