Skip to main content
HonestMOS
●InvestigationsCongress made VA disability claims free to file. An entire industry charges veterans anyway — and nobody can stop them.→
←Back to 5821 Criminal Investigator — overview, pay, training, civilian translation, reviews
5821E4

Criminal Investigator

E-4 (Specialist/Corporal) · Marines

E1–E3E-4E-5E-6E-7E8–E9
HEADS UP

Jurisdiction is the first thing you verify before you open any case file. NCIS has primacy on certain offense categories — espionage, terrorism, certain sexual assault cases depending on the nexus — and the agent who begins working a case inside NCIS primacy without a coordination agreement does not just create a turf problem. They compromise the investigation's integrity and their own field-office relationship with the NCIS resident office at the same time. Check DODI 5505.3 and call the NCIS RAO before the case number gets created.

The Honest MOS Read
The Cpl in the 5821 billet carries a caseload. Not someone else's caseload — your own files, your own complaint intakes, your own investigative plans, your own interview schedules, your own evidence documentation, your own final reports. The senior agent is present in the field office and available for consultation, but the phone calls from the trial counsel come to you. The Article 32 hearing examines your investigation. When defense counsel at the general courts-martial asks why you conducted the search the way you did, you are answering that question from your own documented work, without referring to what the senior agent told you to do. The caseload at Cpl runs six to twelve files at any time. The mix includes major offense categories — sexual assault is the largest volume in the USMC CID enterprise, followed by aggravated assault, drug trafficking, and financial fraud. The minor offense cases that probationary agents handle — smaller-dollar theft, simple drug possession — still exist in the Cpl's docket, but they are no longer the primary work. You are carrying complexity the LCpl agent cannot carry independently. The investigation plan you write for a multi-subject sexual assault complaint involves complainant interview methodology, subject interview sequencing, forensic evidence collection coordination, digital evidence chain-of-custody, and NCIS coordination if the facts place the case inside a joint jurisdiction. The plan is yours to build before the first interview happens. NCIS coordination is a daily feature of the Cpl agent's work. The NCIS resident office and the USMC CID field office share an installation's law enforcement enterprise, and their jurisdictional boundaries create regular referral and coordination requirements. An NCIS agent calls when a case they opened involves a Marine suspect who may fall under USMC CID primacy. A CID case develops facts that pull it toward NCIS primacy. A joint investigation opens with both agencies running parallel strands that need a formal coordination agreement so that neither agency's evidence is tainted by the other's investigative activities. The Cpl agent who can work this relationship without friction — who calls the right NCIS agent, at the right time, with the right jurisdictional analysis — is the agent whose SAC does not have to manage the inter-agency relationship from above. Testifying is part of the job now. The Article 32 hearing examination of your case file is not a formality — the investigation officer reads the file, the defense counsel reviews it in discovery, and the preliminary hearing officer hears the evidence under Mil. R. Evid. as the basis for a referral recommendation. You are the case agent of record. Your documentation is what the hearing officer evaluates. When defense counsel challenges your evidence chain, your rights advisement procedure, or your interview sequencing during the Article 32, the answer comes from your file and your preparation for the hearing. The same dynamic runs at GCM, with a trained JAG defense attorney cross-examining your documentation in front of the panel. The CID agent who testifies cleanly — who does not contradict their own reports, who admits the limits of what the evidence shows without elaborating into areas the prosecution has not established — is the agent the trial counsel puts on the stand in complex cases. The Corporals Course is not optional. The USMC promotion system has no CID exemption, and the Sgt cutting score does not accept 'my case tempo was high' as a substitute for NCO PME completion. The SAC and the field office NCOIC have managed the Corporals Course scheduling problem before for every agent who occupied this billet; there is a three-week coverage plan that involves another agent carrying the active files. Use it. The agent who misses the Corporals Course window because the caseload was never a good time for a three-week absence is the agent who explains to the Sgt promotion board why the PME box is unchecked.
Career Arc
  • 01Cpl pin-on via cutting score — transition from probationary agent to journeyman agent status; first independent case assignments come within 30 days of pin-on.
  • 02First major-offense case assignment as primary agent of record — sexual assault, aggravated assault, or drug trafficking case where the SAC names you as the case agent from complaint intake.
  • 03First Article 32 testimony from your own case file — the direct examination by trial counsel and the cross-examination by defense counsel; this event is the practical test of your documentation quality.
  • 04Corporals Course — mandatory for NCO authority; schedule through the field office NCOIC before the cutting score window tightens.
  • 05First NCIS joint-case coordination as the USMC CID point of contact — formal coordination agreement, shared evidence protocols, and written correspondence with the NCIS resident agent office.
  • 06First GCM testimony as case agent of record — general courts-martial where your investigation is the prosecution's primary evidence; this is the professional milestone the SAC evaluates for senior-agent billet readiness.
  • 07Sgt board eligibility — composite score, cutting score, Corporals Course, FitRep record, and MCIO case complexity history; the SAC's FitRep input on your Cpl caseload quality is the dominant variable.
Common Screwups
  • ×Opening a case inside NCIS primacy without a coordination call first. The turf problem this creates is repairable; the evidence-contamination problem that can follow is not. The defense attorney in the eventual prosecution will ask every agent who touched the case when they first consulted with the other agency, and a gap in that coordination timeline becomes a 'parallel construction' argument before anyone intended it.
  • ×Sharing active-case facts or subject identity with the subject's chain of command before the investigation closes. The platoon sergeant who gets briefed on the investigation becomes a defense witness at the Article 32 arguing taint contamination. The captain who is briefed before charges are referred creates a command influence problem the trial counsel has to manage for the duration of the case. The investigation is closed to the chain until disposition.
  • ×Conducting a subject interview without a witness present for the advisement, without recording when recording is authorized, or both. The subject recants at the Article 32. Your undocumented interview has no independent corroboration of the rights advisement, the waiver, or the admission. The MCIO regional director is informed before the case outcome is final.
  • ×Skipping the Corporals Course slot because 'the case tempo does not allow it.' The slot disappears. The Sgt cutting score does not wait. The agent who reaches the Sgt board without Corporals Course is competing against every Cpl in the 5821 MOS who found a way to take the course.
  • ×NJP, DUI, or a conduct incident at Cpl. The UCMJ action does not just generate a page-11 entry — it triggers a security clearance review that reopens the TS/SCI adjudication file. A Cpl whose clearance is under review while carrying active major-offense case files is a case-access problem the SAC has to manage immediately. Administrative separation outcomes at this clearance level are not clean.

A Day in the Life

  • 0530PT — independent. CID agents do not always have a unit PT formation to anchor the morning. Build and execute a personal PT plan that maintains 1st-Class PFT and CFT results. The morning PT window is the most reliable part of the CID operational day; use it.
  • 0700–0730Transit to the field office in civilian attire. Review the active case file priorities before arrival — which interviews are scheduled today, which evidence actions are pending, which trial counsel coordination calls are due.
  • 0730–0800Morning case coordination. The SAC or senior agent reviews the active caseload status. You brief your case statuses, surface any jurisdictional questions on new complaints, and identify what NCIS coordination calls need to happen today. The agent who briefs problems and proposed solutions rather than just problems is the agent the SAC engages with differently.
  • 0800–0900Pre-interview preparation for any scheduled subject or witness interview today. Read the entire case file. Note the specific factual areas the interview needs to address. Confirm the recording system, the witness presence for the advisement, and the room availability. The interview that is prepared for produces the documented admission; the interview that is improvised produces the witness recantation at the Article 32.
  • 0900–1200Primary investigative work — interviews, scene processing, evidence collection, digital forensics first-responder actions, or search warrant execution if scheduled. The case runs on the investigation's needs, not the clock.
  • 1200–1300Midday — eat when the case allows. Update the case-management system for any morning activities before the documentation gap expands. Contemporaneous means today, not at end of week.
  • 1300–1600Report drafting, case file organization, evidence vault transactions, and trial counsel coordination. NCIS coordination calls if joint-case coordination was identified in the morning debrief. Proficiency mark drafts for any junior agents or MP support who worked a case action today.
  • 1600–1700SAC debrief on case status. Active cases that had developments today get a status update. Any new intelligence or evidence that changes the investigation plan is surfaced here. If a new complaint arrived today, the jurisdictional analysis is completed before end of day so the SAC can confirm whether CID or NCIS opens the case.
  • 1700End of day — case management system current on all active files. No open evidence items outside the vault. Draft reports for events earlier today are either submitted or in progress. The agent who walks out with documentation gaps that need to be reconstructed tomorrow is building the suppression motion that comes back in six months.
  • On-call rotationThe duty rotation for after-hours complaints. At Cpl, you may be the duty agent rather than the backup. The complaint intake at 0300 is yours to work — Article 31b advisement, scene assessment, evidence preservation, and case-management system entry all happen in the same operational window as the middle of the workday. The after-hours investigation report gets written before you go back to sleep.
  • Courts-martial preparation weekWhen a case goes to trial, the week before the GCM is documentation review week. Read the entire case file in chronological order. Attend every trial counsel prep session. Know the specific language of your reports well enough to confirm them verbatim. Anticipate the defense counsel's cross-examination angles — the chain-of-custody documentation, the Article 31b advisement sequence, the interview timeline — and have factual answers ready from the documented file.

Weekly Cadence

Monday morning is the caseload management session. The SAC briefs any new complaints that came in over the weekend, assigns new case numbers, and reviews the status of active dockets. You come to this session with a one-line status on each of your active files: what is pending, what is moving, what is stalled, and what resource — trial counsel coordination, NCIS referral, digital forensics submission — unblocks the stalled file. The SAC does not manage the specifics of your cases; you bring the summary and the ask, not the problem alone. Tuesday through Thursday is the investigative window. Interviews are scheduled mid-week when practical — the complainant and witnesses are available, the recording system is confirmed, the Article 32 is not scheduled this week in a way that creates a documentation deadline. Evidence processing, forensics submissions, and trial counsel coordination calls happen in this window. On any given week, one of these days involves a search warrant execution, an Article 32 appearance, or an active scene response that pre-empts the scheduled work. The operational calendar for a CID Cpl is not predictable; the case management discipline — documentation current, evidence vaulted, coordination calls logged — is what keeps the unpredictable weeks from creating compounding documentation problems. Friday is the documentation close-out. Every case file is current. Draft reports for the week's investigative actions are submitted or in progress. Any evidence collected this week is vaulted, initialed, and logged before end of day. Proficiency marks for junior agents or attached personnel who worked case actions this week are drafted. The Corporals Course scheduling conversation, if it has not already happened, happens on Friday with the field office NCOIC — not Monday when the week's caseload is already re-accelerating.

Key Skills — How to Drill Each

  1. 01
    Open, manage, and close a felony investigation independently — complaint intake through final investigation report — without senior agent co-signature on every action.
    Build an investigative plan document for every major-offense case before the first interview. The plan should include: a summary of the complaint, the jurisdictional analysis (UCMJ offense categories, NCIS coordination assessment), the interview sequence (complainant first, witnesses in order of evidentiary priority, subject last), the evidence collection plan (digital, physical, forensic), the legal coordination timeline (when trial counsel is notified, when search warrant authorization is sought if applicable), and the target closure date. The plan does not have to be long — one to two pages is enough to discipline the investigation against the tendency to follow each new development without keeping the endpoint in view. Updating the plan as the case develops is normal; abandoning it without documenting why is how cases drift.
  2. 02
    Conduct a structured subject interview on a UCMJ-covered felony offense — from Article 31b advisement through recorded statement — documented to the evidentiary standard the JAG trial counsel will defend at courts-martial.
    The subject interview is the highest-stakes event in a CID investigation. Preparation starts before the subject enters the room: review the entire case file the night before, identify the specific admissions you need the subject to address, anticipate the denial narrative and your response to it, confirm that the recording system is operational, and have a witness present for the advisement. The Article 31b advisement is given before any substantive question — state the offense clearly, advise all four elements, confirm understanding and waiver or invocation. Document the advisement in the contemporaneous notes before proceeding. The interview follows the structured sequence: establish rapport and baseline, move to open-ended narrative, then precise questioning on the specific facts the evidence contradicts. Do not argue with the subject. Do not promise outcomes. Document the subject's exact language on key admissions — paraphrase is not a substitute for the subject's own words.
  3. 03
    Coordinate with NCIS — referrals within NCIS primacy, received referrals within CID primacy, and maintenance of the joint working relationship the installation LE enterprise depends on.
    Build a working relationship with the NCIS resident office before a case requires one. Know the NCIS resident agent in charge and the duty agent by name. Call the NCIS RAO when a complaint arrives that is within or adjacent to NCIS primacy — before opening the case in the CID case management system, not after. NCIS primacy under DODI 5505.3 includes offenses involving espionage, terrorism, and certain offense categories defined by the instruction; know the list before the next complaint arrives. When a joint investigation is warranted, establish the written coordination agreement early — who leads each strand, how evidence is shared, who has court-presentation primacy. A coordination agreement that is written after the investigation is underway reflects poorly on both agencies' planning discipline.
  4. 04
    Testify in a UCMJ Article 32 hearing or general courts-martial from your own case documentation without contradicting your reports.
    Trial counsel preparation for testimony is not optional — attend every prep session the trial counsel schedules. During prep, read the entire case file in the order it was produced, not in the order it is organized in the final package. Your memory of the investigation runs chronologically; the defense attorney's cross-examination runs against your report's factual assertions. Know the specific language of your reports well enough to confirm them or add context without volunteering information outside the question asked. 'Yes, that is what the report states' is the correct answer to a question about your report's language. 'Well, what I actually meant was...' is the answer that opens a door the defense attorney walks through. Testify to what you documented. If you do not know, say so.
  5. 05
    Execute or directly assist a search warrant — affidavit, execution, property documentation, chain-of-custody closure.
    The search warrant affidavit is a legal document signed under oath that a military judge reads to determine whether probable cause exists. The factual basis in the affidavit must be specific, accurate, and tied to the offense. Work through the affidavit draft with the trial counsel before submission — the judge will ask questions your investigation should have anticipated. Execution planning includes the team composition, the entry sequence, the property-log protocol (every item logged as it is found, before it is moved), and the post-execution inventory reconciliation. Every item collected during the execution goes into a sealed evidence package before it leaves the location. The chain-of-custody log for the search is a separate document from the case-management system entry; both must be current before the evidence reaches the vault.
  6. 06
    Operate digital forensics tools at the first-responder level — device imaging, digital evidence preservation to admissibility standards — and refer complex cases to the forensics resource without contaminating the evidence.
    The first-responder digital forensics role is to preserve, not to analyze. A device found at a scene should not be powered on, accessed, or submitted to any analytical process by the field agent unless the field agent has been specifically trained and certified in that tool. The standard is to document the device (photograph, note the state — powered on/off, battery level if visible, apps open if visible), place it in a Faraday bag or isolation container to prevent remote wipe, and submit it to the digital forensics unit with the specific investigative questions the case requires. Powering on a device without a Faraday environment may trigger location services or remote-management protocols. An accessed device without a write-blocker in place may alter the forensic image. Know what you are not trained to do and stop at that line.

Manuals & References — What Chapters Matter

  • DoD Instruction 5505.3 — Defense Criminal Investigative Organizations and DoD Law Enforcement Organizations
    At Cpl, you are using this instruction daily — not reading it for orientation. The primacy table, the coordination requirements, and the reporting protocols govern every case action that involves NCIS, civilian LE, or DoD inter-agency referrals. The CID agent who knows which offense categories belong to NCIS, which require coordination, and which are squarely within USMC CID primacy does not make the jurisdictional error that contaminates a case at the Article 32. Bookmark the primacy and coordination sections; review them when a complaint has an unusual jurisdictional profile before you open the case.
  • Manual for Courts-Martial (MCM) — Military Rules of Evidence (Mil. R. Evid. 304, 311–316)
    Mil. R. Evid. 304 is the suppression framework for confessions and admissions — the rule under which an Article 31b violation results in a statement being excluded. Read the rule text, not a summary. Mil. R. Evid. 311–316 govern search and seizure: authorization requirements, exceptions (consent, exigent circumstances, plain view), and the exclusionary remedy. The Cpl agent who understands what the trial counsel is building toward — an evidence chain the court will admit — writes investigation reports that anticipate the evidentiary analysis rather than simply documenting what happened.
  • MCO 5580.2 — Marine Corps Law Enforcement Program
    You are now the agent making authority calls, not watching the senior agent make them. The search-and-seizure authority framework, the arrest authority provisions, and the coordination-with-civilian-LE requirements in MCO 5580.2 are the decisions you are making on your own cases. Know the limits of your authority under the order before you exceed them, because the suppression motion that follows an unauthorized search is not a training event.
  • MCO 1400.32 — Marine Corps Promotion Manual (Sgt composite score and Corporals Course eligibility sections)
    The Sgt cutting score for 5821 runs through composite score inputs — PFT/CFT, rifle qualification, pro/con marks, education credits, and MCMAP belt. Know the current cutting score range for the 5821 MOS and know where your composite stands against it before the SAC asks. Corporals Course eligibility and completion is a hard gate — know the scheduling process, the prerequisite requirements, and the timeline before the board cycle opens. The agent who is managing the Sgt timeline proactively is the one whose candidacy the SAC describes favorably to the MCIO regional director.
  • MCO 5354.1 — SAPR Program and DoD Instruction 6495.02 — Sexual Assault Prevention and Response
    Sexual assault is the primary major-offense category in the USMC CID enterprise. The restricted/unrestricted reporting framework directly determines how a case is opened, whether the complainant's identity is protected during the investigation, and what coordination with the SARC (Sexual Assault Response Coordinator) is required. The Cpl agent who opens an unrestricted sexual assault report without verifying the reporting pathway and the SARC notification requirement creates an administrative compliance problem that the SAC has to address before the investigation can move forward. Read the SAPR policy sections on restricted vs. unrestricted reporting before handling the first sexual assault complaint.
  • MCO 1610.7 — Performance Evaluation System
    You write proficiency and conduct marks for junior agents and attached MP personnel who work your cases. The FitRep disciplinary standards apply to these inputs in the same way they apply to the Section A the SAC writes about you. 'Outstanding support' is not a defensible proficiency mark. 'Conducted three witness interviews under supervision, producing reports that required one revision cycle on the first submission and zero revision on the second' is the mark that means something. Build the habit of specific, observable-behavior documentation now, because it transfers directly to FitRep Section A writing when the Sgt billet gives you that responsibility.

Standards — How to Hit Each

  • Corporals Course graduate — mandatory for NCO authority and the Sgt board.
    The moment you pin Cpl, begin the Corporals Course scheduling conversation with the field office NCOIC. The course is typically two to three weeks in residence at an NCO academy; the field office needs a coverage plan for your active case files during that window. The agent who identifies the scheduling need early and presents the coverage plan rather than the problem is the agent whose SAC approves the slot without friction. CDET distance education options exist but in-residence is the standard and the preferred outcome for the NCO peer network and leadership evaluation components. Complete Corporals Course before the Sgt board opens; incomplete PME is a visible deficit in the relative value calculation at the MCIO regional board level.
  • TS/SCI clearance and polygraph current on the required cycle.
    The same administrative calendar discipline applies at Cpl that applied at LCpl, with higher consequence. The Cpl agent carrying a six-to-twelve-case active docket is a more disruptive case-access problem if the clearance lapses than a probationary agent was. The Periodic Reinvestigation at this tier will review the financial records, the foreign contact log, the criminal history, and the security-incident history from the first assignment. Keep the SF-86 data current — address any financial obligation, foreign contact, or personal conduct issue that might be construed as a reportable event before the PI cycle runs.
  • Annual LE firearms qualification to the USMC CID standard — Expert expected; sub-standard triggers remediation documentation.
    The Expert standard at Cpl is not just a range result — it is a case-assignment determinant. The SAC who carries a Cpl agent with sub-Expert qualification scores manages that limitation on warrant service and arrest operations. Dry-fire practice between qualification cycles is non-negotiable maintenance. Know the CID-specific course of fire; the qualification format differs from the standard infantry course and requires practice in the specific scenarios evaluated. If qualification scores slip below Expert, the remediation plan goes into the agent file — the SAC's documentation of the remediation is the record the MCIO regional director reads if the clearance review or an IG referral ever requests the agent's performance history.
  • Case file closure rate and report-quality metric — cases closed without JAG-level rewrite requests.
    Track your own closure rate. Every case file that returns from trial counsel with a request for supplemental reports or a rewrite of the investigation summary is a data point the SAC notes in the FitRep cycle. The agent who closes six of seven major-offense cases without a JAG rewrite request is the agent the SAC routes the complex next file to. Build the habit of reading each completed report against three questions before submitting to the SAC: (1) Is every factual assertion sourced? (2) Does the investigative chronology hold together against the case-management system timestamps? (3) Does the report anticipate the evidentiary questions the trial counsel will need answered without providing more than the evidence establishes?
  • 1st-Class PFT and CFT — not a waiver-eligible standard at any tier.
    The CID field office runs on a different daily schedule than a garrison unit, which means the personal PT discipline has to be internal. Find the installation's fitness facility schedule that works against the field office's operational tempo. 1st-Class is the floor at Cpl; a Cpl who posts 2nd-Class on a recorded PFT has a FitRep notation the SAC cannot ignore. The CFT events specifically — ammunition can lift and the maneuver-under-fire sequence — replicate the physical demands of warrant-service and arrest-operation scenarios more directly than distance running, and the Cpl agent who is strong in the CFT has a performance edge on the work that actually occurs.

Technical Mistakes — Concrete Consequences

  • Opening a case inside NCIS primacy without coordination — starting the investigation before the jurisdictional analysis is complete.
    The case file is now a turf problem and potentially a taint problem. NCIS requests transfer of the case, and the coordination timeline gap — the period when USMC CID worked a case that belonged to NCIS — becomes a defense argument about improper investigative conduct. The trial counsel has to assess whether the case can recover from the jurisdictional contamination. The SAC explains the gap to the NCIS resident agent in charge, and the working relationship between the two offices absorbs the friction. The agent who created the problem is the agent whose SAC routes the next borderline-jurisdiction complaint to a more experienced agent.
  • Conducting a subject interview without a witness or without recording when recording is available and authorized.
    The subject denies the statement at the Article 32. Your undocumented interview is the only version the government has of the admission. Defense counsel argues that the admission, if it occurred, was either fabricated or obtained improperly because no independent record exists. The Article 32 investigating officer has no way to evaluate the claim. If the admission was the case's load-bearing evidence, the case does not survive. The agent whose file is built on an undocumented unilateral interview is the agent whose cases the SAC pre-reviews before they go to trial counsel.
  • Letting evidence sit outside the vault — in a field office drawer, in a vehicle, in a personal bag between a scene and the office.
    One unvaulted item documented in the case-management system but not logged in the vault creates a chain-of-custody break that the defense attorney identifies in discovery. The break does not automatically exclude the evidence, but it becomes a central challenge at trial. The explanation for the gap — time pressure, forgot the vault was closed, the evidence was in the vehicle overnight — does not survive cross-examination. The IG referral that follows a successful defense challenge based on evidence mishandling is addressed to the SAC, who routes it to the agent of record.
  • Briefing the subject's chain of command on active investigation facts before the investigation closes.
    The platoon sergeant who is briefed becomes a defense witness for taint contamination. The company commander who receives an informal update before charges are referred creates a command influence record the trial counsel has to manage in the case file. The investigation is confidential until the charging decision is made and the commander is notified through proper channels — and the SAC controls that notification, not the case agent. The agent who informally keeps the chain informed because it seemed like the right relationship to maintain learns the difference between being helpful and contaminating their own case.
  • Skipping the Corporals Course slot because the case tempo does not allow three weeks away.
    The Sgt board does not accept a good-reason exemption for incomplete PME. The Corporals Course slot that was passed over because of case tempo does not automatically reappear in the next training cycle — it requires a scheduling action. The agent who has not completed Corporals Course when the Sgt cutting score reaches their composite is the agent who misses the board with a documented administrative gap. The field office manages three-week agent absences routinely. The agent whose Sgt timeline slips by a board cycle because the PME slot was never taken is the agent whose SAC has a specific counseling conversation about billet-level planning discipline.

Career Decisions at This Rank

  • Corporals Course now vs. after the current case concludes
    This is the decision the SAC has heard from every Cpl who occupied this billet. The correct answer is now, or as close to now as the scheduling system allows. The case will not conclude cleanly in a three-week window that opens a convenient slot; there is always an active file. The field office has a coverage plan for three-week agent absences because the CID enterprise requires it. The agent who uses the availability of a coverage plan to defer Corporals Course is the agent who misses the Sgt board because the slot never materialized. Identify the next available course date, present the coverage plan to the SAC, and take the slot.
  • Pursue NCIS civilian SA position at Cpl EAS vs. reenlist and complete the 5821 senior-agent track
    NCIS does recruit from the USMC CID enterprise, and a Cpl with a CITP credential, a TS/SCI clearance, and two to three years of major-offense investigation experience is a competitive NCIS civilian SA applicant. The NCIS civilian SA track carries GS-07 to GS-09 starting pay, a federal benefits package, and the career development trajectory of the NCIS enterprise rather than the USMC CID enterprise. The honest counter-argument: the Cpl agent who has completed two to three years is at the beginning of the complexity curve, not near the peak of it. The senior agent and supervisory agent billets — the ones that develop the full scope of a criminal investigator's professional capability — are two to four years further into the career. Agents who transition to NCIS civilian at Cpl often find themselves in a peer cohort that includes agents with more total case complexity experience. Neither path is wrong, but 'I have enough experience to make it work as a civilian agent' is typically an overestimate at two to three years of active CID work.
  • Take a B-billet (DI, MSG, Recruiter) at Cpl vs. remain in 5821 through the Sgt window
    B-billet special duty assignments are available to Cpls, but the interaction with the 5821 career track is complicated. The CID billet is a special duty assignment itself — not the same category as DI duty or MSG, but the operational profile of the billet requires specialized skill maintenance that a B-billet pause interrupts. The Cpl who leaves CID for a DI tour at Parris Island comes back to a field office after three years with rusty investigation skills and a clearance that needs to be refreshed through active case-file assignment. The MCIO leadership generally prefers 5821 agents who develop continuously in the billet rather than taking B-billet pauses during the journeyman phase. Talk to the SAC before engaging with any B-billet recruiter. The DI identifier at the SSgt board is valuable; losing three years of peak CID skill development to acquire it is a calculation specific to each agent's career goals.
  • Request a specialty billet (MCIO financial crimes unit, MCIO sexual assault unit, digital forensics) at Cpl vs. remain in the generalist field office
    Some MCIO field offices and regional structures have specialty caseload units. The financial crimes unit, the sexual assault investigation section, or the digital forensics support element may take Cpl agents who show aptitude in those areas. Specialty billet experience at Cpl develops a depth the generalist field office does not — a financial crimes Cpl agent develops a case complexity in the financial investigation domain that produces a very different FitRep narrative than the general-caseload agent. The risk is narrowing too early; the senior-agent billet requires breadth across offense categories. Talk to the SAC about the specialty billet as a two-to-three-year development option rather than a permanent lane change.

How the Seat Varies by Unit Type

  • USMC CID field office — major installation (Camp Pendleton, Camp Lejeune)
    High case volume, experienced senior agent bench, co-located NCIS presence, and a formal caseload-management structure. The Cpl agent at a major installation carries a dense docket and has immediate access to senior agent consultation when a case develops complexity that exceeds the Cpl's experience. The NCIS resident office relationship is managed at the SAC level but working-level coordination between Cpl agents and NCIS duty agents is a daily feature. The visibility of the major-installation environment also means the MCIO regional director is a known figure, and the regional board reads major-installation case records against a more competitive peer cohort.
  • USMC CID field office — smaller installation (MCAS Beaufort, MCAS New River, MCAS Iwakuni)
    The Cpl agent at a smaller installation develops independence faster because the senior agent bench is thinner. Cases that would be assigned to a more senior agent at Camp Lejeune are assigned to the available Cpl because the field office is two to four agents and the rotation requires it. The acceleration in case complexity at a small office is real and professionally valuable — and the error rate is higher because the checks are thinner. The Cpl who manages this autonomy well — keeping the SAC informed, recognizing jurisdictional or complexity limits and asking for consultation before the case is committed to a direction — develops a professional credibility the large-installation agent is still building.
  • OCONUS CID billet — Okinawa (III MEF), Korea, Germany
    SOFA jurisdiction complexity is the defining variable. The Cpl agent at Camp Foster or Camp Humphreys works criminal cases where U.S. and host-nation jurisdiction overlap, and the determination of which prosecutorial authority has primacy affects everything from who executes the search to who the trial counsel coordinates with. The agent develops a jurisdictional sophistication that CONUS-only agents do not have at Cpl. NCIS presence exists at most III MEF locations; the working-level relationship with NCIS at an OCONUS billet is closer and more operationally consequential than at many CONUS installations because the joint LE enterprise is smaller. The unaccompanied-tour reality at many OCONUS billets is a quality-of-life and financial calculation the Cpl agent makes at assignment.
  • MEU-deployed CID element
    The CID Cpl on a MEU deployment operates in a forward environment where the field office infrastructure does not exist. Evidence storage protocols, digital forensics access, and trial counsel coordination run through the deployed SJA and whatever equipment the element carried. The Cpl agent in this environment adapts case-documentation and evidence-management practices to the operational constraints — the standard does not change, but the available tools do. The MEU deployment is a genuinely different professional environment from the garrison CID office, and the FitRep from a MEU deployment as a Cpl carries a specific operational credibility marker that the garrison-only agent cannot replicate.

What Good Looks Like at This Rank

The good 5821 Cpl is the agent the SAC routes the next difficult case to without a second conversation. Not the most senior agent, not the agent with the most seniority — the agent whose previous file closed without a JAG rewrite request, whose Article 32 testimony did not produce a cross-examination that required supplemental reports, and whose NCIS coordination documentation was complete before the joint investigation started. The SAC knows this agent's caseload capacity and routes within it because the agent has demonstrated that their judgment on complexity is accurate. The NCIS resident office knows this Cpl by name, and the relationship is functional. When a complaint comes in that has a jurisdictional profile that could be either agency's case, this agent's call to the NCIS duty agent happens before the case number is created in the CID system. The coordination agreement is drafted before the first investigative action is taken, not after both agencies have worked the case for two weeks independently. The NCIS resident agent in charge mentions this CID agent to the SAC as the example of the coordination they want on joint cases. That is not a soft compliment — it has direct implications for case assignment, for the agent's FitRep narrative, and for the MCIO regional director's read of the field office's inter-agency credibility. The junior agents at the field office watch this Cpl. Not instructively, not formally — they observe how the Cpl runs a subject interview, how the evidence vault is organized on this agent's cases, how the case-management system entries are timestamped and structured. The LCpl who will inherit this caseload three years from now is learning what a clean file looks like by watching what this agent produces. The SAC knows this dynamic exists and it contributes to how the Cpl's FitRep Section A is written — because the agent who models good practice for junior investigators is worth more to the field office than the agent who simply closes their own files without teaching anything.

Preview — The Next Rank

The Sgt in the 5821 billet carries the field office's most complex cases and writes FitReps on the Cpl agents below them. Those are not parallel tracks — they are the same thing. The Sgt who can run a multi-subject sexual assault investigation to courts-martial testimony is the Sgt who has documented enough observation of the Cpl agents' investigative behavior to write a FitRep Section A that the SAC can defend at the MCIO regional board. The agent who is still learning to carry their own cases cannot credibly evaluate another agent's case-carrying. The complexity at Sgt is genuine. Multi-subject cases — five alleged perpetrators, three complainants, contradictory forensic evidence, an NCIS joint investigation running in parallel — are the files on the senior agent's docket. The trial counsel is now asking you to tighten the file, not rebuild it. The Article 32 examining officer expects a complete investigation package from which a referral recommendation is straightforward. The GCM defense attorney is a trained JAG officer who has read your investigation more carefully than you have in two months and identified every ambiguity in your documentation. The FitRep Section A is the new administrative burden. The Cpl agent writing proficiency marks for junior support personnel is building toward it; the Sgt agent writing two to four full FitReps per cycle is doing the real thing. Observed behavior — specific case actions, specific outcomes, specific professional development milestones — in action-result-impact language is the Section A the SAC can defend. 'Exceptional agent with outstanding case-closing instincts' is the Section A the SAC rewrites. The Sgt whose FitRep Section As come back from the SAC unchanged is the Sgt whose SSgt candidacy looks exactly the way it should.
FAQ

5821 E4 — Frequently Asked Questions

Q01What does a E4 5821 (Criminal Investigator) actually do?
You are an independently working special agent carrying a mixed caseload of felony investigations — sexual assault, aggravated assault, robbery, theft, drug offenses, and financial crimes — assigned by the MCIO field office.
Q02What's the most important thing to know as a E4 5821?
Jurisdiction is the first thing you verify before you open any case file.
Q03What does a typical day look like for a E4 5821?
Time-blocked day at the E4 5821 rank tier: 0530 PT — independent. CID agents do not always have a unit PT formation to anchor the morning. Build and execute a personal PT plan that maintains 1st-Class PFT and CFT results. The morning PT window is the most reliable part of the CID operational day; use it, 0700–0730 Transit to the field office in civilian attire. Review the active case file priorities before arrival — which interviews are scheduled today, which evidence actions are pending, which trial counsel coordination calls are due, 0730–0800 Morning case coordination.…
Q04What mistakes get E4 5821 soldiers fired or relieved?
Opening a case inside NCIS primacy without a coordination call first. The turf problem this creates is repairable; the evidence-contamination problem that can follow is not. The defense attorney in the eventual prosecution will ask every agent who touched the case when they first consulted with the other agency, and a gap in that coordination timeline becomes a 'parallel construction' argument before anyone intended it;…
Q05What career decisions matter most at the E4 5821 rank tier?
Corporals Course now vs. after the current case concludes — This is the decision the SAC has heard from every Cpl who occupied this billet. The correct answer is now, or as close to now as the scheduling system allows. The case will not conclude cleanly in a three-week window that opens a convenient slot; there is always an active file. The field office has a coverage plan for three-week agent absences because the CID enterprise requires it.…
Q06What's next after E4 for a 5821 (Criminal Investigator) in the Marines?
The Sgt in the 5821 billet carries the field office's most complex cases and writes FitReps on the Cpl agents below them.
Q07What manuals and regulations does a E4 5821 need to know cold?
DODI 5505.3 — Defense Criminal Investigative Organizations (jurisdiction, coordination authority with NCIS and federal LE; know where CID primacy ends and NCIS primacy begins before you open the case).; MCO 5580.2 — Marine Corps Law Enforcement Program (the authority structure under which every CID case action is taken).; Manual for Courts-Martial (MCM) — Mil. R. Evid. (Military Rules of Evidence) — the rules of evidence the trial counsel applies to your case file;…

This playbook has no tips yet. Be the first to share what you know.

Published by the Honest MOS Editorial DeskVerified against DoD/.gov sourcesUpdated May 2026Editorial standards