Investigations Flashcards

1
Q

What are the three main tools of an investigator?

A

INFORMATION;
INTERROGATION; AND
INSTRUMENTATION

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

WHAT IS THE TRIAD OF MISSION?

A

VERIFY THE ACCURACY OF FACTS;
REGULATE AND CONTROL THE CASE WORK;
ASSURE ALL COURT JUDGEMENTS ARE FAIR

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

WHAT IS DIRECT EVIDENCE?

A

REAL AND MATERIAL
FIRST HAND KNOWLEDGE
Testimony from someone who experienced an event personally.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

WHAT IS INDIRECT EVIDENCE?

A

HIGHLY INFORMED INFERENCE;
CIRCUMSTANTIAL AND HEARSAY

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

WHAT ARE THE THREE MOST COMMON RESOURCES FOR PRE-EMPLOYMENT SCREENING?

A

SECURITY OR ASSETS PROTECTION DEPARTMENT;
HR DEPARTMENT; AND
OUTSIDE CONSUMER REPORTING AND INVESTIGATIVE AGENCY

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

WHAT ARE THE 5 PHASES OF A WORKPLACE UC INVESTIGATION?

A

PREPARATION AND PLANNING;
INFORMATION GATHERING;
VERIFICATION & ANALYSIS;
DISCIPLINARY & CORRECTIVE ACTION; AND
PREVENTION AND EDUCATION

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

WHAT ARE SCATTER GRAPHS?

A

THEY IDENTIFY WEAKNESSES IN MANUAL OR COMPUTERIZED SYSTEMS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

WHAT IS A LINK ANALYSIS?

A

GRAPHICALLY AND LOGICALLY PORTRAYS INTERCONNECTIONS AMONG PEOPLE, PLACE AND ACTIVITIES TO REVEAL PATTERNS OR OTHER USEFUL INFORMATION OF INVESTIGATIVE VALUE.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

CORPORATE RESOURCE ABUSE AND EMPLOYEE THEFT?

A

DIVERSION, CONVERSION,
DISGUISE AND
DIVERGENCE

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

A TYPICAL CRIMINAL INTELLIGENCE CYCLE HAS 5 STEPS?

A

REQUIREMENTS;
COLLECTION;
INTEGRATION AND ANALYSIS;
DISSEMINATION; AND
EVALUATION

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

STEP 3 OF THE CRIMINAL INTELLIGENCE CYCLE - INTEGRATION AND ANALYSIS - IS THE HEART OF THE PROCESS, WHERE …….

A

INFORMATION AND DATA ARE CONVERTED TO ACTIONABLE INTELLIGENCE.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

INVESTIGATOR TOOLS AND TECHNIQUES INCLUDE?

A

INTERVIEWING;
RECORDS AND DATABASE CHECKS;
EVIDENCE COLLECTION & HANDLING;
SURVEILLANCE; AND COMPUTER FORENSICS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

A CLEARLY DEFINED INVESTIGATIVE SCOPE INCLUDES?

A

WHAT IS IN AND WHAT IS OUT OF THE INVESTIGATION, INCLUDING THESE FIVE PARAMETERS: ORGANIZATIONAL; PHYSICAL; OPERATIONAL; LOGICAL AND LOGISTICAL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

ISSUES AT THE CASE LEVEL OF INVESTIGATIVE MANAGEMENT?

A

-INDIVIDUAL INVESTIGATIONS AND THEIR INVESTIGATORS;
-INVESTIGATIVE TECHNIQUES;
-CASE MANAGEMENT PROTOCOLS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

THE REID TECHNIQUE HAS 5 TYPES OF BEHAVIOR-PROVOKING QUESTIONS?

A

-PURPOSE;
-YOU;
KNOWLEDGE;
SUSPICION; AND
VOUCH

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

EXAMPLES OF LIAISONS?

A

-INTERNAL AND EXTERNAL;
-FORMAL AND INFORMAL; AND
-INDIVIDUAL AND ORGANIZATIONAL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

WHAT ARE SUBJECT FACTORS IN AN INTERVIEW?

A

-INTOXICATION;
-PHYSICAL AND PSYCHOLOGICAL CONDITION;
-PREJUDICE;
-PERCEPTION; AND
-AGE

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

DOCUMENT CONTROL PROCEDURES PROTECT THE S….THE C…..AND THE I OF RECORDS?

A

-SENSITIVITY;
-CONFIDENTIALITY; AND
-INTEGRITY OF RECORDS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

PUBLIC INVESTIGATIONS VS. PRIVATE INVESTIGATIONS DIFFER IN THESE WAYS:

A

-POWER OF ARREST;
-SEARCH AND SEIZURE;
-TESTIMONY;
-PROSECUTION;
-DUE PROCESS; AND
-CONSEQUENCES.

ALSO, PRIVATE/CORPORATE INVESTIGATIONS TEND TO BE BROADER AND THE DESIRED OUTCOME DICTATES THE REQUIRED BURDEN OF PROOF

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

THE INVESTIGATIVE TEAM LEADER BASES THE INVESTIGATION PLAN ON WHAT?

A

THE OBJECTIONS, SCOPE AND CRITERIA OF THE INVESTIGATIVE PROGRAM AND THE DOCUMENTATION AND INFORMATION PROVIDED BY THE CLIENT.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

A new investigative unit needs what four things?

A

A Functional charter; a policy statement; a set of objectives and resources (human, physical, other).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is a Functional Charter for an investigative unit?

A

It’s one page from the CEO;
- provides credibility, authority, purpose and direction;
- strategic goals & primary emphasis;
- the unit’s relationship to the organization.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is an investigative unit Policy Statement?

A
  • It outlines procedures & reporting channels;
  • It provides coordination mechanisms and disposition;
  • It advises other units how to access the investigative unit.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is an investigative unit’s set of objectives?

A
  • Performance metrics and improvement targets;
  • revised often, at least annuallly
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Res Gestae

A

“Things done.”
- Words or phrases that form part of or explain a physical act;
- exclamations that are so spontaneous they belie concoction;
- statements that are evidence of someone’s state of mind.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What are the two types of criminal intelligence analysis according to Interpol?

A

Operational or tactical - a specific investigation that aims to achieve a specific outcome;
- strategic analysis - overall crime threat or trend, for higher level people and benefits are seen over the long-term.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

An investigator’s code of ethics should include:……?

A
  • treat people with respect and dignity;
  • conduct business w/objectivity, honesty and integrity;
  • conflicts of interest & impartiality risks are divulged
  • the focus is on the scope of the investigation; and
  • the confidentiality & integrity of information is respected.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

5 threats to investigator impartiality are….?

A
  • Self interest
  • self review
  • familiarity
  • cognitive bias; and
    -intimidation
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Due diligence in market entry focuses on….?

A

1) protection of intellectual property and information assets;
2) ensuring compliance with laws, regulations & policies in local jurisdictions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Preemployment screening programs vary based on….?

A

1) Access to information;
2) Nature of the position; and
3) industry regulations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is the WZ non-confrontational interview technique?

A

A structured, conversational approach that results in fewer denials and objections and eliminates conflict in the interview.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What are pertinent issues at the operational level of case management?

A

1) Case load;
2) case assessment;
3) quality control;
4) Investigative policies and procedures;
5) reporting formats;
6) Liaison;
7) team composition;
8) supplies and equipment;
9) evidence management; and
10) outside contracts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What are the 5 types of physical evidence?

A

Associative;
Identifying;
Tracing;
Trace; and
Impression

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What is the PEACE interview technique?

A

Preparation and planning;
Engage and Explain;
Account;
Closure; and
Evaluate
The technique puts the focus on fairness, openness, accountability and fact finding to reduce the number of false confessions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What occurs in phase 3 (verification and analysis) of a UC operation?

A
  • Employee’s are interviewed; and
  • Information is compiled
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Support for an IU budget can be demonstrated by:

A

1) The focus supports the organizational mission and its business and strategic goals;
2) there is accurate tracking of costs;
3) there is effective implementation of cost management and efficiency measures;
4) there are demonstrated restitution and recovery benefits; and
5) there is an estimation of risk avoidance in monetary terms.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What actions are document control procedures designed to control?

A
  • (ISP RRD)
  • Identify, storage Protection
    -Retrieval, retention and disposal
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

In a Union environment, an employer investigator can not require confidentiality from employees who are being interviewed except when:

A

1) Witnesses are in need of protection;
2) Evidence is in danger of being destroyed;
3) Testimony is in danger of being fabricated; and
4) When there is a need to prevent a cover up.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Pre-employment screening programs have a common foundation in 3 ways?

A

1) data collection;
2) background investigation and screening; and
3) data analysis & hiring decisions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Hearsay

A
  • Indirect evidence
  • not admissible in court except for dying declaration;
  • an exception to the hearsay rule is when a person making the statement about what another person said makes statements against self interest.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What are 10K, 10Q quarterly reports?

A

It provides information on a company, on business activities, finances, legal activities and company management.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Exploratory investigations include?

A

1) Personnel background;
2) Level of trust determination;
3) Due diligence; and
4) Root cause analysis.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

OSINT (open source intelligence) happens in the following ways:

A

1) gathered online, in person, in print; and
2) through direct observation and surveillance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

An investigative unit’s objectives should be:

A

1) specific and measurable;
2) documented and updated at least annually;
3) financial management;
4) case resolution;
5) unit performance;
6) Information flow; and
7) the numbers of inquiries, complaints and leads handled

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

What is ethical behavior by an investigator?

A

1) Protect the rights of those under investigation;
2) Obey the law;
3) Respect organizational policies and procedures; and
4) Protect the integrity of the process.

46
Q

What should be considered when planning the investigative process?

A

1) The risks associated with the industry and organizational processes;
2) The internal and external operating environment;
3) The internal and external stakeholders who add to the risks;
4) The internal and external stakeholders who are impacted by the investigation;
5) Factors around the acceptance of risk in the organization and by stakeholders.

47
Q

What factors should the post-investigation meeting address?

A

1) findings and conclusions;
2) the method of reporting;
3) the handling of findings and possible consequences;
4) Implications for improved management of risk;
5) Post investigation activities including recommendations for risk treatments and corrective actions.

48
Q

What are common tasks undertaken to start an investigation?

A

1) Set objectives;
2) ID stakeholders;
3) ID internal context, variables and assumptions;
4) Define scope and a statement of work;
5) Policy and management commitment;
6) Commitment of resources

49
Q

What records and documents should be created, maintained, and stored for the investigations program?

A

1) Program objectives, criteria and scope;
2) Risk assessment and treatment measures;
3) Evaluation of achievement of objectives; and
4) Investigation program effectiveness and opportunities for improvement.

50
Q

What typically happens in the follow-up phase of an investigation?

A

1) Determine - disciplinary, administrative or judicial action;
2) Implement - corrective measures to practices or policies; and
3) File retention - for data analysis

51
Q

What 2 assets are involved in the 2nd phase - information gathering - of a UC investigation?

A

1) People in the project management team; and
2) Processes - how information will be communicated, reported and preserved in case files.

52
Q

What occurs in the 1st phase - preparation and planning - of a UC investigation?

A

1) Form a team;
2) set objectives;
3) select an agency and an operative; and
4) Plan the remaining phases.

53
Q

Associative evidence

A

Links a subject with the scene of a crime - fingerprints and DNA

54
Q

Identifying evidence?

A

Is a form of associative evidence that establishes the identity of a suspect.
- fingerprints
-bite impressions and
-blood

55
Q

Tracing Evidence?

A

Assists in the possible identification and location of a suspect;
- credit card receipt;
-tag on a piece of clothing

56
Q

The tasks that should happen at a pre-investigation meeting, include….?

A
  • Confirm the plan;
  • introduce the team;
  • confirm communication channels;
  • verify clearances and approvals;
  • verify feasibility; and
  • Let the client ask questions.
57
Q

Operational Security vs. OPSEC

A

Operational security - the totality of all security and planning measures taken for a particular operation and the safety of involved investigators.

OPSEC - simple and systematic method of employing safeguards to protect critical information.

58
Q

What investigative method = the collection and examination of information from both public and private sources?

A

Information review.

59
Q

The S…..S and N of the investigation determines the C…..?

A

Size, scope and nature determines the cost.

60
Q

O = E = F witness

A

An opinion witness = an expert witness = a forensic witness.

61
Q

The EPS’s RCRA?

A

The resource conservation and recovery act, known as the cradle to grave act, tracks chemicals from manufacturing to disposal and was enacted in 1976.

62
Q

What is an interview?

A

A non-accusatory conversation. It generally starts with closed questions and then proceeds to more open questions to allow a narrative answer.

63
Q

Misconduct investigations are a subcategory of ?

A

Incident investigations

64
Q

Private sector investigations are measured in……?

A

Restitution;
Recovery;
Risk reduction; and
Mitigation of litigation

65
Q

What are the three categories of surveillance?

A

-Physical - human observation/tracking;
-Psychological - behavioral analysis; and
-Data - technical or electronic

66
Q

What is needed to make physical surveillance effective?

A

1) A clear purpose and goals;
2) No interference with what is being observed;
3) Records and documents; and
4) Support the objective of the investigation.

67
Q

A person is a suspect based on what 5 reasons?

A

1) evidence;
2) proximity;
3) motive;
4) access to restricted areas; and
5) witness statements

68
Q

What are the three types of false signatures?

A

1) Tracing;
2) Simulated; and
3) Freehand

69
Q

What happens if DNA is not properly handled?

A

1) origins are in question;
2) there is potential to lose biological activity;
3) there is potential for contamination; and
4) decomposition and deterioration

70
Q

Two methods of lifting two-dimensional impressions?

A

Electrostatic lifts and gelatin; and
adhesive lifts

71
Q

The assessment phase of an individual investigation includes the E & E of the facts regarding a problem or allegation?

A

The examination and evaluation of the facts to say yes or no to an investigation.

72
Q

What are the goals of administrative controls in an investigative unit?

A

Make sure:
1) all investigations are authorized;
2) all work assigned to each investigator is known; and
3) what remains to be done on each investigation

73
Q

A background check of a new hire mitigates risks of claims of…?

A

1) negligent hiring;
2) discrimination; and
3) costly hiring mistakes

74
Q

The team developing a pre-employment screening process should include….?

A

1) Upper management to sanction and support;
2) Security and HR to develop and implement; and
3) Legal to review and endorse.

75
Q

An incident investigation protocol should include a…..?

A

Decision logic matrix to make clear:
1) who has responsibility for the inquiry;
2) who needs to know; and
3) whether immediate referral to law enforcement or the legal department should occur.

76
Q

Key considerations for international investigations are….?

A

Laws,
Liaison,
Culture and
approaches

77
Q

Who should be part of the UC investigation management team?

A

1) the UC investigator;
2) the project manager;
3) the client representative;
4) a corporate attorney; and
5) possibly law enforcement

78
Q

3 benefits of online information sources?

A

1) amount of available information;
2) ease of access; and
3) low cost

79
Q

What is an accurate truism about employee dishonesty?

A

Employees involved in theft have usually been involved in other prior misconduct at the company.

80
Q

These are based on the investigative goals but are more specific and may be more short lived. They are generally measurable and can be use to gauge the progress, success, or achievement of an investigative unit. What are they?

A

Objectives.

81
Q

A metric which measures how an organization or individual is performing against defined goals and objectives are called a…..?

A

Key Performance Indicator

82
Q

What is spoliation of evidence?

A

Evidence that is intentionally or negligently destroyed.

83
Q

What are the three theoretical identification views of the video system?

A

Subject, scene and action.

84
Q

Observing the behavior of another, usually secretly is?

A

Surveillance

85
Q

True or false, an investigator must cease an investigation if it diminishes workforce productivity?

A

False

86
Q

Trace evidence

A

Usually goes to a crime lab. Consists of fibers, paints, dyes and glass.

87
Q

The purpose and objectives of an investigation drive the A & M

A

Approach and methodology

88
Q

What is needed to maintain a liaison relationship?

A
  • Professional Trust;
  • Periodic Exchange; and
  • Mutual benefit
89
Q

Goals vs. objectives vs. metrics

A

GOALS - Long-term and over-arching end states;
OBJECTIVES - based on goals, but more specific and may be more immediate. Tend to be tactical and specific to the short term expectations of the project.
METRICS - Specific measurable goals.

90
Q

An OIP is?

A

An organizational investigations policy …..a way for organizations to proactively prepare for events that may require investigation.

91
Q

The IUM is and his responsibilities are?

A

The investigative unit manager
- planning
- management
- conduct of the investigative program
- professional and ethical behavior of investigative team members

92
Q

The ITL is and his responsibilities are?

A

The investigative team leader.
- the conduct of individual investigations
- professional and ethical behavior of investigative team members

93
Q

The initiative event in a private sector incident investigation is generally ?

A

A security force incident report.

94
Q

Misconduct investigations are a subcategory of ?

A

Incident investigations

95
Q

Misconduct investigations can leave employers open to legal action from employees who generally sue for these five reasons?

A
  • discrimination
  • wrongful termination
  • sexual harassment,
  • defamation, and
    -false arrest
96
Q

Compliance investigations share many characteristics with?

A

Incident and misconduct investigations…..and can actually be put into either of those categories.

97
Q

Types of evidence include?

A
  • Testimonial
  • Documentary and
  • Physical
98
Q

Testimonial evidence is?

A

Derived from interviews

99
Q

Documentary evidence is?

A

Derived from documents and other writings - hard copy or electronic

100
Q

Physical evidence is?

A

Derived from physical objects….computers, phones, tools, vehicles etc.

101
Q

The information and evidence collected drive the?

A

Findings and conclusions. Evidence is the foundations from which the investigation moves forward.

102
Q

Forensic evidence ?

A

Information obtained by scientific methods.

103
Q

Hearsay evidence?

A

Information provided by a person who does not have direct knowledge of the fact asserted but knows it only from being told by someone else or from a secondary source.

104
Q

Electronic evidence is latent evidence, explain?

A

Just as fingerprints or DNA evidence are latent….equipment and software are required to make the evidence visible.

105
Q

Visual assessment is?

A

Refers to having visual information of an identifying or descriptive nature during an incident.

106
Q

Visual documentation is?

A

Refers to having visual information stored in a format that allows for the study or review of images in a sequential fashion…..and embedded authenticity points like time/date stamp.

107
Q

The three theoretical identification views of a video surveillance system are?

A
  • Subject identification
  • Actions identification, and
  • Scene identification
108
Q

The six crimes most relevant to asset protection include?

A
  • unauthorized entry or presence;
  • theft;
  • force or threats of force against people’
  • property damage or threats of property damage;
  • computer-related crimes; and
  • environmental crimes
109
Q

Theft is?

A

The dishonest appropriation of property belonging to another with the intention of permanently depriving the owner of rightful possession or use of it.

110
Q

Fraud is?

A

Intentional deception perpetrated for the purpose of unlawfully taking another’s property or, more simply, theft by deception.