
ENTERPRISE, FRAUD, AND COMPLIANCE RISK MANAGEMENT
207
• Is there any evidence to indicate that the suspects are already alerted?
• What courses of action are open?
• Who might be able to assist/ advise?
• What practical risks are involved?
• What might inhibit further investigation?
Once an allegation is seen as credible, detection requires an investiga-
tion. When it comes to investigations, organizations need to decide who
will conduct the investigation. Generally, the choice is between internal
departments, such as internal audit or corporate security; external quali-
ed fraud investigators; and/ or law enforcement institutions.
The attorney ...