About
The examiner behind the evidence.
Ryan Purita is the principal examiner at Sherlock Forensics in Vancouver BC. He holds CISSP-ISSAP and ISSMP certifications and has over 20 years of experience in digital forensics and cybersecurity. He is a court-qualified expert witness in computer forensics across multiple Canadian jurisdictions.
Principal Examiner
Ryan Purita, CISSP-ISSAP, ISSMP
Ryan Purita founded Sherlock Forensics in 2004 and has served as its principal digital forensic examiner for over two decades. He has conducted thousands of forensic examinations spanning criminal prosecution, criminal defence, civil litigation, corporate fraud and regulatory compliance.
Ryan has been a Certified Information Systems Security Professional (CISSP) since 2002 and holds the ISSAP (Information Systems Security Architecture Professional) and ISSMP (Information Systems Security Management Professional) concentrations. He is co-author of No Hiding Place in Cyberspace with David Crear of Borden Ladner Gervais LLP.
His forensic findings have been admitted as evidence in BC Supreme Court, BC Provincial Court and Newfoundland Provincial Court. He has been qualified as an expert witness in computer forensics and security in each of these jurisdictions. For case details see the expert witness page.
Training & Credentials
Certifications that withstand cross-examination
Ryan's credentials are validated through rigorous examination and decades of continuous professional development. These certifications are regularly tested under cross-examination in court.
Certified Information Systems Security Professional
Issued by (ISC)². Held since 2002. Eight domains of security architecture, engineering and risk management.
Information Systems Security Architecture Professional
Advanced (ISC)² concentration in security architecture and design.
Information Systems Security Management Professional
Advanced (ISC)² concentration in security management and leadership.
Advanced Specialty Certificate in Forensic Investigations
Completed with Distinction at the British Columbia Institute of Technology.
EnCase Forensic Training
Guidance Software (now OpenText) certified training in EnCase forensic examination.
AccessData FTK Training
Certified training in Forensic Toolkit (FTK) analysis and evidence processing.
Mobile Forensics
Specialized training in mobile device forensic acquisition and analysis.
Cisco Certified Network Associate
Cisco certification in networking fundamentals and network exploit analysis.
Recognition
Awards and nominations
- Canada's Top 40 Under 40
- Nominated three times (2004, 2005 and 2008) for national leadership and achievement.
- Business in Vancouver 40 Under 40
- Two-time honouree recognizing business leadership in British Columbia.
- Canadian IT Hero Nominee
- Nominated by the Information Technology Association of Canada (ITAC) in 2005.
Expert Witness
Court-qualified in computer forensics and security
Ryan Purita has been qualified as an expert witness in BC Supreme Court, BC Provincial Court and Newfoundland Provincial Court. He has testified in matters involving computer forensics, digital security, mobile forensics and internet infrastructure for both prosecution and defence.
Public Profile
Media and speaking
Ryan has appeared as a cybersecurity expert on CBC Marketplace (three appearances), Global National with Kevin Newman, CTV and Breakfast Television. His analysis has been quoted in the Globe and Mail, National Post, Vancouver Sun and dozens of other publications.
He has presented at the Institute of Internal Auditors IT Conference in Orlando, the Security & Privacy Conference in Victoria and the Canadian Bar Association Criminal Subsection among other events.
History
Two decades of forensic work
Standards & Frameworks
Aligned to recognised authorities
- NIST
- NIST Cybersecurity Framework (CSF 2.0) - Risk management and incident response alignment
- MITRE ATT&CK
- MITRE ATT&CK Framework - Adversary tactics and techniques reference for threat modelling
- (ISC)²
- (ISC)² Cybersecurity Certifications - CISSP, ISSAP and ISSMP certification body
- SANS / GIAC
- SANS Digital Forensics and Incident Response - Training and certification body
Get Started
Ready to secure your digital evidence?
Order a forensic examination online. No calls required.
Order OnlineNext Step
Engage our team
Whether you require forensic analysis, a security assessment or expert testimony, Ryan Purita and his team are prepared to assist.