The American Institute of CPAs has published an article by Josh Howard addressing the best way to handle internal investigations that may involve forensic accounting or otherwise bear indicia of fraud.  The full text of the article can be found on the AICPA website.