R2.4 EXECUTE INVESTIGATION PLAN
Conduct special investigations consistent with the plan and communicate with relevant stakeholders while maintaining appropriate privileged status.
The investigation should start within a reasonable timeframe following the event and proceed in a timely and efficient manner without materially disrupting operations. During the investigation, entities should avoid making public statements about the investigation or comments about any aspect of the investigation to any person except those with a "need to know."