Security professionals conducting investigations are charged with gathering credible evidence to determine if, when, where, why and how an incident occurred.