ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

Because the goal is to determine whether an employee violated internal policy and to support possible disciplinary measures by Human Resources, the effort is an administrative investigation. Administrative (or internal) investigations focus on enforcing an organization's policies and procedures; evidence must still be preserved properly, but there is no immediate intent to seek criminal prosecution or civil damages. Criminal investigations require law-enforcement involvement, civil investigations support litigation between parties, and regulatory-compliance inquiries are driven by external regulators.