Regulators cannot investigate what they cannot see. Less obvious is that what becomes visible in an investigation depends partly upon how the investigation itself is structured.
Complaints define issues. Regulations establish obligations. Document requests identify relevant records. Interviews reconstruct events. Audits test controls and transactions. Each is essential. But each