During an internal investigation, what is the next step after researching regulatory scope and applicability?

After researching regulatory scope and applicability, drafting an audit protocol is the next logical step in an internal investigation. The audit protocol serves as a structured plan that outlines how the investigation will proceed, detailing the specific processes and methodologies to be used in the audit. This protocol is essential for ensuring that the investigation adheres to relevant regulations and standards, as well as providing a clear framework for collecting and analyzing data.

Creating an audit protocol is foundational because it lays the groundwork for the entire investigation process. It helps to ensure that the investigation is systematic, thorough, and compliant with applicable laws and regulations. This step is critical before moving on to conducting interviews, implementing new policies, or preparing reports, as those actions are often guided by the findings and the structured approach established in the audit protocol.