R2.4 EXECUTE INVESTIGATION PLAN
Conduct special investigations consistent with the plan and communicate with relevant stakeholders while maintaining appropriate privileged status.


The investigation should start within a reasonable timeframe following the event and proceed in a timely and efficient manner without materially disrupting operations. During the investigation, entities should avoid making public statements about the investigation or comments about any aspect of the investigation to any person except those with a "need to know."
Core Practices
    R2.4.101
  • Track list of items being maintained as privileged
    R2.4.102
  • Track information that will be released as non-privileged, indicating that the release is intentional and controlled
    R2.4.103
  • Request and obtain documents, electronic data and other information
    R2.4.104
  • Notify employees who will be interview subjects
    R2.4.105
  • Inform interview subjects that investigators represent the entity --  NOT the interview subject
    R2.4.106
  • Analyze documents, data, and interview information to draw conclusions
    R2.4.107
  • Determine which conclusions should be documented and which should be presented verbally
    R2.4.108
  • Track everything on issue management system
Additional Practices
    R2.4.201
  • Analyze how the special investigation team performs against the investigation plan
GUIDELINE DETAILS
Actions: Download<br />Download
Legend:
Source / Reference
Resource
Domain Supplement