Criminal Investigation Techniques Training Course

Duration 5 days 10 modules · 33 contact hours
Level Intermediate Certificate on completion
Who attends Criminal Investigators, Police Detectives and others
Fee from USD 1,100 KSh 95,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-SLE-037

Before you join: Participants should have prior exposure to investigative work, such as handling allegations, gathering information, preparing reports, supporting interviews or managing case records.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Criminal investigations can fail through weak early decisions, contaminated evidence, incomplete disclosure, poorly planned interviews or untested assumptions. Investigators must make defensible decisions under time pressure while protecting legal rights, preserving evidence and maintaining a clear audit trail. This course addresses the practical work required to progress an allegation from initial report through evidence gathering, case review and preparation for court or disciplinary proceedings.

Participants learn to build a case theory, set proportionate lines of enquiry, manage scenes and exhibits, conduct witness and suspect interviews, assess intelligence, and handle digital and financial evidence. The course applies recognised methods including PEACE interviewing, cognitive interviewing, Analysis of Competing Hypotheses and the 4x4 intelligence grading system. Participants also examine disclosure duties, chain of custody, source protection, investigative bias, case file management and prosecutor liaison.

Delivery combines instructor briefings, realistic case materials, facilitated group analysis, interview planning, decision-making simulations and structured case reviews. Scenarios can be adapted for policing, regulatory enforcement, corporate investigations, anti-corruption units, safeguarding teams or public-sector inspectorates. Participants leave with a practical investigation case file toolkit containing reusable templates for planning, evidence management, interviews, intelligence analysis, disclosure and case review. The course runs for five instructor-led days, 08:30-16:30, in classrooms across 50+ cities or live online, and includes a certificate of completion.

The course is suited to professionals who already contribute to investigations and need a more disciplined, evidence-led approach to planning, recording and reviewing criminal or misconduct cases.

What you will be able to do

  • Construct a case theory and investigation plan using 5W1H, THRIVE and decision logs
  • Preserve crime scenes and maintain defensible chain of custody records
  • Assess evidence for relevance, reliability, admissibility and disclosure requirements
  • Plan and conduct witness interviews using cognitive interview principles and TED prompts
  • Prepare suspect interviews using the PEACE model and lawful disclosure strategy
  • Analyse intelligence using 4x4 grading, link analysis and competing hypotheses
  • Manage digital and financial evidence through documented preservation and analytical methods
  • Produce an auditable case file, disclosure plan and prosecution briefing

Benefits of attending

For you

  • Make clearer early decisions under evidential and operational pressure
  • Plan interviews that obtain reliable, testable accounts
  • Recognise disclosure risks before they damage a case
  • Build case files that withstand supervisory and legal scrutiny
  • Identify investigative bias and challenge unsupported assumptions

For your organisation

  • Improves consistency of investigation plans, decision logs and case reviews
  • Reduces evidence contamination, continuity failures and missed disclosure material
  • Strengthens interview quality and the reliability of witness accounts
  • Produces clearer case files for prosecutors, legal advisers and disciplinary panels
  • Supports defensible oversight of sensitive, high-risk investigations

Course modules

10 modules over 5 days

Participants can define a defensible investigation purpose, case theory and initial enquiry plan.

  • Case theory separates allegations, facts, inferences, and investigative assumptions
  • Applying the 5W1H method to define initial lines of enquiry
  • Jurisdiction, authority, and lawful purpose recorded before investigative action
  • Initial threat, harm, risk, and vulnerability assessment using THRIVE
  • Setting proportionate objectives, decision points, and investigative priorities
  • Recording rationale in contemporaneous decision logs and case records

Participants can secure scenes, recover exhibits and document evidence continuity.

  • Golden-hour actions protect life, preserve evidence, and secure scenes
  • Establishing cordons, entry logs, scene control, and contamination prevention
  • Systematic scene searches using grid, line, zone, and spiral patterns
  • Photography, notes, sketches, measurements, and exhibit locations documented accurately
  • Packaging biological, trace, digital, and physical evidence appropriately
  • Continuity records demonstrate exhibit integrity from recovery through presentation

Participants can assess evidential value and manage material for fair disclosure.

  • Chain of custody requirements for exhibits, samples, and digital media
  • Applying relevance, reliability, admissibility, and probative-value tests to evidence
  • Disclosure schedules distinguish used material, unused material, and sensitive material
  • Identifying exculpatory material and recording disclosure decisions promptly
  • Evidence matrices link each element of offence to supporting material
  • Prosecutor consultation tests evidential gaps, charging thresholds, and further enquiries

Participants can plan and conduct fair witness interviews that produce reliable accounts.

  • Cognitive interview principles improve accurate recall without contaminating accounts
  • Preparing witness interviews through objectives, topic plans, and available evidence
  • Building rapport while maintaining professional boundaries and procedural fairness
  • Using open questions, TED prompts, and appropriate clarification techniques
  • Managing vulnerable witnesses, interpreters, intermediaries, and special measures
  • Statement structure separates observation, recollection, interpretation, and hearsay

Participants can prepare lawful suspect interviews using a structured, evidence-led approach.

  • PEACE interview planning identifies objectives, evidence, legal safeguards, and contingencies
  • Rights cautions, access to counsel, and custody records protected
  • Rapport, account, challenge, and closure stages applied lawfully
  • Strategic disclosure tests accounts without revealing unnecessary investigative detail
  • Question sequences distinguish admissions, denials, explanations, and verifiable leads
  • Interview recordings, notes, and exhibits prepared for later scrutiny

Participants can convert intelligence into tested hypotheses and targeted investigative action.

  • Intelligence requirements convert case hypotheses into targeted collection tasks
  • Source evaluation uses the 4x4 intelligence grading system consistently
  • Analysis of competing hypotheses tests alternative explanations and confirmation bias
  • Link analysis charts associations, communications, transactions, and event sequences
  • Timelines expose opportunity, alibi, sequence, and unexplained activity
  • Handling codes protect sensitive intelligence, sources, and dissemination controls

Participants can preserve, assess and document digital evidence for investigation and disclosure.

  • Digital evidence triage identifies devices, accounts, platforms, and preservation needs
  • Lawful preservation requests prevent deletion of volatile electronic records
  • Hash values verify forensic copies and detect unintended file alteration
  • Metadata, logs, geolocation, and timestamps require contextual interpretation
  • Social media enquiries preserve provenance, capture method, and access dates
  • Working with forensic specialists defines questions, timescales, and disclosure duties

Participants can analyse financial records to identify criminal benefit, control and asset movement.

  • Financial investigation follows money flows, assets, beneficiaries, and control points
  • Bank records reconciled against timelines, communications, invoices, and known events
  • Source and application of funds analyses identify unexplained transactions
  • Beneficial ownership enquiries distinguish nominees, controllers, signatories, and asset holders
  • Transaction charts reveal layering, structuring, related parties, and cash movement
  • Asset restraint referrals consider evidential thresholds, proportionality, and dissipation risk

Participants can control investigative actions, review case direction and prepare a clear case file.

  • Major incident room principles organise actions, documents, exhibits, and decisions
  • Action registers assign ownership, deadlines, review dates, and auditable outcomes
  • Disclosure management plans schedule review, retention, redaction, and certification
  • Case theory reviews redirect enquiries when evidence contradicts working assumptions
  • Briefing prosecutors presents facts, legal elements, evidence, and outstanding risks
  • Preparing witnesses and exhibits supports clear, accurate court presentation

Participants can identify ethical risks, reduce bias and strengthen accountability in investigations.

  • Investigative ethics balance effectiveness, legality, necessity, and proportionality
  • Bias interruption techniques challenge tunnel vision and premature case closure
  • Supervisory reviews test decision quality, welfare, risk, and resource allocation
  • Learning reviews identify procedural failures, evidential weaknesses, and corrective actions
  • Personal application plans specify three workplace improvements and review dates
  • Professional records demonstrate accountability to courts, oversight bodies, and communities

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Investigation planning template
  2. Case theory and evidence matrix
  3. PEACE interview planning checklist
  4. Chain of custody register
  5. Intelligence analysis worksheet
  6. Disclosure and case review plan

Who should attend

  • Criminal Investigators — need defensible methods for progressing complex enquiries
  • Police Detectives — need structured approaches to evidence, interviews and case files
  • Regulatory Investigators — need criminal investigation methods for enforcement referrals
  • Financial Crime Investigators — need stronger links between financial evidence and case theory
  • Corporate Investigators — need lawful, documented approaches to serious internal allegations
  • Investigation Supervisors — need review methods for decisions, risks and investigative quality

Skills and tools covered

Case theory developmentEvidence managementInvestigative interviewingIntelligence analysisDigital evidence handlingDisclosure management

Tools and standards

PEACE Interview Model, Cognitive Interview, Analysis of Competing Hypotheses, 4x4 Intelligence Grading System

How the course runs

Training methodology

The course uses short technical briefings followed by case-based group work, evidence review, interview planning and facilitated decision-making. Participants work with realistic allegation reports, exhibit records, witness accounts, intelligence logs, digital material and financial records. Simulations focus on scene decisions, interview strategy, disclosure choices and case review meetings. Trainers provide feedback against legal safeguards, evidential standards and documentation requirements. Each participant develops an application plan for improving investigation practice within their own role.

Requirements and prerequisites

Participants should have prior exposure to investigative work, such as handling allegations, gathering information, preparing reports, supporting interviews or managing case records. They should understand basic evidential concepts and be comfortable reading factual case material. Experience in policing, regulation, compliance, safeguarding, fraud, security or corporate investigations is useful. The course does not require prior detective training, legal qualification, forensic science expertise or advanced digital forensic skills. Legal procedures vary by jurisdiction; participants should apply course methods alongside their organisation's policies and applicable law.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants should have some exposure to investigations, case handling, compliance enquiries, security incidents or enforcement work. No legal qualification, detective certification or forensic science background is required.

Participants should bring their organisation's investigation policy, case file forms or interview procedures where these can be shared appropriately. They should not bring confidential case files, personal data or protected intelligence.

The course is designed for investigators, detectives, regulatory officers, financial crime staff, corporate investigation teams and investigation supervisors. It is most valuable for professionals who already handle or support serious allegations.

This course teaches the end-to-end discipline of criminal investigation: case theory, evidence, interviewing, intelligence, disclosure and case management. Fraud investigation and digital forensics courses usually focus more deeply on specialist transaction analysis or technical device examination.

Participants can use the investigation plan, evidence matrix, interview checklist, disclosure plan and decision log on live or future cases. They can also introduce more structured supervisory reviews to test assumptions and evidential gaps.

Each day runs from 08:30 to 16:30 and provides about 6.5 contact hours. Time is divided across ten modules covering planning, evidence, interviews, intelligence, digital and financial material, case management, and professional accountability.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.