What must be done if someone suspects tampering with an electronic record?

When someone suspects that an electronic record has been tampered with, the appropriate response is to ensure that the tampering is documented and to cease further actions. This approach is crucial because it preserves evidence and prevents any further modifications or corruptions to the record, which could complicate investigations or legal proceedings later on. Documenting the suspected tampering provides a clear trail of what was observed and ensures that any necessary follow-up actions or investigations can rely on a precise account of the situation.

Stopping further actions is also important, as it helps to maintain the integrity of any ongoing processes or transactions that might be affected by the compromised record. Taking hasty or unauthorized actions could lead to incorrect conclusions, additional complications, or legal liabilities.

The other options may seem relevant in certain contexts, but they do not align with the immediate and prudent response required when tampering is suspect. Filing a report with local authorities or notifying the attorney general might be appropriate in cases of confirmed tampering or fraud, but those steps come after the initial documentation and cessation of further actions. Conducting an internal investigation could also be beneficial, but it must be done carefully and after ensuring that the suspected tampering is adequately documented to avoid losing vital information.