. . "Where the fraudulent activity involves third parties e.g. customers or suppliers, the Head of Resources, in consultation with Internal Audit, will have to devise a suitable form of investigation and take appropriate action." . . .