Conduct the investigation with discretion, share information only on a need-to-know basis, and ensure all records are stored securely and separately from general personnel files.