Information about the role of an internet intelligence investigator, including the role purpose, key responsibilities and the skills required.
About the role
An internet intelligence investigator is a digital and cybercrime position within the investigation sector of policing. It's a service deliverer role in the policing professional profiles.
Role purpose
The internet intelligence investigator supports major crime, incidents, operations or any investigation that requires specialist interrogation and evidential capture of publicly available information from the internet, including:
- social media
- forums
- blogs
- websites
- other online platforms
They provide assistance and advice in support of live incidents, investigations, gathering intelligence and evidence and conducting proactive or reactive investigations where open-source opportunities exist.
Key responsibilities
Key responsibility statements show the accountabilities for someone in this role. They focus on what is done, not how it is done.
- Advocating and promoting the investigative opportunities offered by the lawful collection of publicly available information from the internet to support investigations.
- Using accounts to access online platforms, including social media, forums, blogs and websites to support major crime, incidents, operations and investigations.
- Undertaking proactive research into digital imagery, extracting data to provide geolocations and extended information to support and progress police investigations.
- Creating and maintaining social media accounts for use in online investigations to ensure compliance with the Regulation of Investigatory Powers Act 2000 (RIPA), Criminal Procedures and Investigations Act 1996 (CPIA) and national guidance.
- Supporting the development of online investigations in conjunction with senior investigation officers and investigating officers to reach objectives for how open-source intelligence can support investigations.
- Understanding communications data, seeking specialist support from communications data investigators single point of contact (SPoC), and the National Crime Agency to apply appropriate expertise to the advancement of an investigation.
- Undertaking open and closed source investigations in relation to specific subjects, to support incidents, operations and investigations.
- Supporting investigations through the preparation and capture of relevant material to ensure the evidential standard is met.
- Sharing good practice in force, regionally and nationally to aid collaboration and continuous improvement in policing.
- Building digital profiles of suspects or subjects of interest based on online behaviour and interactions to inform the investigation.
Competencies, values and core skills
The competency and values framework (CVF) provides clear expectations for everyone working in policing. It describes the behaviours required by police officers and staff to be effective in their roles and uphold the Code of Ethics for policing.
Competencies
The CVF has six competencies, which are split into levels. These levels can be used flexibly to allow for a better fit with frontline and non-frontline policing roles, and at different levels of seniority.
This role should be operating at or working towards the following competencies.
- We are emotionally aware – Level 1: practitioner
- We take ownership – Level 1: practitioner
- We collaborate – Level 1: practitioner
- We support and inspire – Level 1: practitioner
- We analyse critically – Level 1: practitioner
- We are innovative and open-minded – Level 1: practitioner
Values
The CVF has three values. These values apply to everyone in policing, regardless of their role or seniority.
Core skills
All roles in policing have nine core skills in common. Skills are split into levels that represent the different levels of policing.
This role should be operating at or working towards the following core skills.
- Communicating and influencing – Level 1
- Problem solving – Level 1
- Performance management– Level 1
- Relationship management – Level 1
- Change management – Level 1
- Managing people – Level 1
- Managing resources – Level 1
- Planning – Level 1
- Use of IT – Level 1
Education, qualifications and experience
To achieve effective performance in the role, the following standards, training and learning should be met.
Previous education, qualifications and experience
- Knowledge of the law and procedure in connection with the following business areas:
- digital policing – digital considerations for investigators, including lawful capture and storage in line with good practice guidelines for digital evidence
- open-source investigations
- communications data investigations
- Legislative knowledge of:
- Regulation of Investigatory Powers Act 2000 (RIPA)
- Computer Misuse Act 1990
- Police and Criminal Evidence Act 1984 (PACE)
- Criminal Procedures and Investigations Act 1996 (CPIA) including public interest immunity (PII)
- Human Rights Act 1998 and European Convention of Human Rights (ECHR)
- UK GDPR and Data Protection Act 2018 (DPA)
- Investigatory Powers Act 2016 (IPA)
- Knowledge or experience of processes including:
- investigation, prosecution and case file preparation
- electronic exhibits management and giving of evidence
- monitoring online accounts
- intelligence collection and assessment
Continuing professional development
Continuing professional development (CPD) enables everyone in policing to develop and gain recognition for their professional skills, knowledge and competence. CPD ensures that we continue to provide high-quality policing to keep the public safe and help to drive career aspirations. Discussion of CPD is usually included as part of professional development review (PDR) conversations.
Learning and accreditation
- Complete all core training and learning as required by the force.
- Any exemptions to learning and accreditation requirements are at chief constable discretion, in line with the local force policy.
Professional development
This role should consider the following CPD:
- staying up-to-date with the changing landscape of open-source and III
- undertaking attachments to other units, such as digital forensic unit, SPoC unit and intelligence units
- developing a working knowledge of and identifying emerging technologies, seeking out new data acquisition opportunities and staying apprised of any updates from service providers
- monitoring legislative changes that may affect digital work
- keeping up to date with changing legislation and current national policing priorities
- keeping up to date with new approaches to evidence-based policing
- researching new tools and methodologies of gaining digital evidence and data within the parameters of the law and local force policy
- maintaining and enhancing knowledge of both cyber-dependent and cyber-enabled crime
- maintaining and enhancing the ability to testify in court as a professional witness.
- understanding and implementing the current Investigatory Powers Act 2016 (IPA) and associated Codes of Practice, including the extraction of information from electronic devices: Code of Practice 2023
- attending role-specific digital investigation CPD events and training, where appropriate
- demonstrating operational experience through deployment as III investigator on a major incident or operation
Related roles
You can find other service deliverer roles in the: