During an investigation of transactions in a core banking system, fraudulent transactions are discovered that will require the involvement of law enforcement. Which of the following should be done…

The correct answer is A. Ensure evidence is preserved. The first step in such an investigation should be to ensure evidence is preserved. This is critical for maintaining the integrity of the investigation and ensuring that the evidence remains admissible in a legal context. Preserving evidence includes securing transaction logs…

Submitted by asante_acc· Apr 18, 2026Information System Auditing Process

Question

During an investigation of transactions in a core banking system, fraudulent transactions are discovered that will require the involvement of law enforcement. Which of the following should be done FIRST?

Options

AEnsure evidence is preserved
BEvaluate the business impact
CEngage external legal counsel
DNotify internal audit management

How the community answered

(25 responses)

A
72% (18)
B
8% (2)
C
16% (4)
D
4% (1)

Explanation

The first step in such an investigation should be to ensure evidence is preserved. This is critical for maintaining the integrity of the investigation and ensuring that the evidence remains admissible in a legal context. Preserving evidence includes securing transaction logs, system data, and any other relevant information in a forensically sound manner to prevent tampering or

Topics

#Fraud investigation#Evidence preservation#Forensic procedures#Legal compliance

Community Discussion

No community discussion yet for this question.

Full CISA Practice