Which of the following is considered a best practice for preserving the confidentiality of a fraud investigation?

A fundamental best practice for preserving the confidentiality of a fraud investigation is to control the flow of sensitive information. Using insecure electronic means like standard email to transmit confidential case details creates a significant risk of unauthorized interception or disclosure. Secure, encrypted channels should be used instead. This practice directly protects the information itself, which is the core of maintaining confidentiality. It is a universally applicable principle for all investigations, regardless of their nature or who is involved.

A. Suspending all involved employees is a reactive measure, not a confidentiality practice, and could prematurely alert others or violate employment law.
B. Involving a government official is specific to public sector cases or those under regulatory oversight, not a universal best practice for all investigations.
D. A blanket policy prohibiting all discussion is overly broad, difficult to enforce, and may infringe on employees' rights to discuss working conditions.

Association of Certified Fraud Examiners. (2023). Fraud Examiners Manual, International Edition. Section 1.404, "Maintaining Confidentiality." This section emphasizes that information should be handled securely and shared only on a need-to-know basis.

Wells, J. T. (2017). Corporate Fraud Handbook: Prevention and Detection (5th ed.). Wiley. Chapter 16, "Conducting an Internal Investigation," discusses the importance of controlling information and using secure communication methods to prevent leaks.