The transfer looked routine when it was approved, and nobody thought about it again. Now an investigator wants the emails around it, someone in accounting is asking about an entry from eight months ago, and you are trying to remember who signed off on what. Most people assume the only question is whether the transaction…