Computer Hacking Forensic Investigator (CHFI v10) — Question 417

An organization discovered an internal policy violation that resulted in financial loss. The incident involved unauthorized resource misuse, possibly by a staff member. The case is significant enough to warrant a thorough investigation but does not warrant law enforcement involvement. The organization wants to ensure the investigation is conducted appropriately without affecting the overall operations. What type of investigation would be most appropriate in this scenario?

Answer options

• A. Civil Investigation
• B. Criminal Investigation
• C. Regulatory Compliance Investigation Significant consequences. The combination (Option D) could dilute the focus on the criminal element of the case, which is crucial for this specific scenario
• D. Administrative Investigation

Correct answer: D

Explanation

An Administrative Investigation is appropriate here as it focuses on internal policies and procedures without involving law enforcement, aligning with the organization's need to maintain operations. In contrast, a Civil Investigation typically addresses disputes between entities, a Criminal Investigation would necessitate police involvement, and a Regulatory Compliance Investigation mainly ensures adherence to regulations rather than addressing internal policy violations.