. An investigation plan is developed for each investigation.
1) The lead investigator determines the knowledge, skills, and other competencies needed.
2) The process includes obtaining assurance that no potential conflict of interest exists with those investigated or any employees of the organization.
3) Planning should consider the following;
a) Gathering evidence using surveillance. Interviews, or written statements
b) Documenting and preserving evidence, the legal rules of evidence, and the business uses of the evidence
c) Determining the extent of the fraud
d) Determining the methods used to perpetrate the fraud
e) Evaluating the methods used to perpetrate the fraud
f) Identifying the perpetrators
4) The investigation should be coordinated with management, legal counsel, and other specialists.
5) Investigators need to be prudent, consistent, and knowledgeable of the rights of persons within the scope of the investigation and the reputation of the organization itself.
6) The level and extent of complicity in the fraud throughout the organization needs to be assessed. This assessment can be critical to avoid (a) destroying or tainting crucial evidence and (b) obtaining misleading information from persons who may be involved.
7) The investigation needs to secure evidence collected and follow chain-of-custody procedures.