Preserving Evidence in Corporate Fraud and Data Investigations
An internal report of suspected fraud or data theft may prompt a company to examine devices, suspend employees and notify investigators. If those steps alter or destroy the original electronic record, the company may compromise its own evidence before proceedings.