Cash Outage Investigation Procedures

What is the cash amount that triggers an investigation? During the investigation, is the staff member on-site, suspended pending investigation, or something else?