A recent fraud incident was discovered where an employee who was in charge of procurement for a certain organization also operated a supply and contracting company which had been paid in excess of $3,000,000 by his employer's company, all ordered and authorized by him. The suspect, once discovered, was dismissed but was given a month's grace period during which time he destroyed a large number of incriminating documents. As a forensic IT expert, suggest four (4) considerations companies should keep in mind when performing forensic investigation.