Identify the goals of the investigation and collect evidence accordingly.  2. Examine the evidence to look for clues that can help identify the source of the problem or incident.  3. Analyse the evidence to determine what happened and why.  4. Generate a report of the findings and recommendations for future prevention.