When initiating an internal compliance investigation, which action is most critical to take first to preserve attorney-client privilege?