An internal misconduct inquiry is judged twice. The first judgment is by the people who commission it — the board, the general counsel, the chief executive. They assess whether it produced a defensible finding. The second judgment is by everyone else who reviews it afterward: a regulator, a litigant, a reporter, an arbitrator, a successor board, a court. They assess whether it was conducted in a manner that survives discovery.
The two judgments are not the same. The first is satisfied by clarity of outcome; the second is satisfied by the integrity of process. A finding can be correct and the inquiry that produced it can still fail the second judgment — because the inquiry was sloppy, because the interview discipline was lacking, because the documentation does not hold up, because the privilege structure was not properly established, because the wrong people were in the room when the wrong words were said.
The boards and general counsel who matter understand both judgments. They commission inquiries that pass the first. They commission them in a manner that ensures they will pass the second. Most boards and general counsel, however, encounter their first sensitive matter without having thought through what the second judgment requires — and so they commission an inquiry that produces a finding but does not produce a record.
This essay is for those who would prefer not to make that mistake.
— I. Establish privilege before you establish facts.
The single most consequential decision in any sensitive internal inquiry is whether the work proceeds under attorney-client privilege. The decision must be made at the outset. Retroactive privilege is a fiction. An inquiry that begins as a casual conversation between the CEO and the head of security, and is later attempted to be wrapped in privilege because it has become uncomfortable, will not be privileged in any meaningful way before a court that examines it.
The privilege structure, when appropriate, is established as follows: the investigation is retained by counsel — either in-house general counsel or outside counsel, depending on the matter — rather than directly by operating management. The investigator's work product is prepared at counsel's direction and for the purpose of providing legal advice. Communications between the investigator and witnesses are structured accordingly. The matter is documented with privilege markers from the first email forward.
This is not legal advice. (Which the firm does not provide and is not licensed to provide.) It is operational guidance from a security advisor who has seen, repeatedly, what happens when this is done correctly and what happens when it is not. The matters that survive subsequent scrutiny are uniformly the ones in which the privilege architecture was established before the inquiry began.
— II. Sequence the interviews with discipline.
The second consequential decision is interview sequencing. Most inquiries that fail discovery fail because they were conducted in the wrong order. Witnesses were interviewed before context was established. The subject was interviewed before the documentary record was understood. Peripheral witnesses were interviewed before the witnesses they would corroborate. The investigator entered the most consequential conversation without the information necessary to recognize evasion when it occurred.
A disciplined sequence — and the order varies by matter, but the discipline does not — moves outward to inward. The documentary record is established first. The peripheral witnesses, who can confirm context without being the matter's principal subjects, are interviewed next. The central witnesses are interviewed after the corroborating record exists. The subject, in most matters, is interviewed last — because the subject's interview is the one in which the investigator most needs the leverage of established fact.
Interview by interview, the investigator's notes, the recordings (where appropriate and consented), the witness's own contemporaneous notes, the subsequent attestations — all of this is documented to a standard that anticipates external review. The discipline is not paranoia. It is the recognition that some matters become external, and that the difference between an inquiry that survives external review and one that does not is the documentation discipline at the moment of conduct — not at the moment of reckoning, when documentation can no longer be created.
— III. Welfare of subject.
An honest inquiry into possible misconduct is, for the subject, an experience of consequence. The subject's career may be at stake. Their professional reputation, their family circumstances, their financial standing, sometimes their freedom — all may be affected by the matter under inquiry. This is true regardless of whether the eventual finding is adverse. The process itself is, for the subject, the consequence.
Disciplined federal investigative practice has, for decades, built welfare-of-subject protocols into the conduct of inquiries. The protocols include: notification of the subject's rights at the appropriate moment; provision for representation; consideration of the subject's mental state during interviews; suicide-prevention measures where indicated; and a posture of professional respect maintained even where the evidence ultimately supports an adverse finding.
Most private internal inquiries do not have these protocols formally in place. The omission is sometimes catastrophic. A subject who is treated with appropriate professional respect during an inquiry is far more likely to produce honest testimony, to accept the eventual finding, and to refrain from converting the inquiry into a counter-narrative that the institution must then defend against. A subject who is treated as a guilty party from the first moment is more likely to do the opposite — to litigate, to leak, to convert the matter into a public dispute that none of the inquiry's commissioners wanted.
This is not softness. It is operational discipline. Inquiries conducted with welfare-of-subject protocols produce better outcomes — measured both by the integrity of the finding and by the institutional consequences afterward. The protocols are not in conflict with rigor. They are part of it.
— IV. Anticipate the after-life.
Every sensitive inquiry has an after-life. The finding is delivered, the matter is resolved, decisions are made about personnel, structure, or governance. The institution moves on. The inquiry, however, persists — as a record, as a precedent, as a reference document for subsequent matters, sometimes as a discovery target.
Disciplined inquiries anticipate the after-life from the first day. The work product is structured to be reviewable later by people who were not present for its conduct. The findings are written in language that does not require the reader to share the institution's internal vocabulary. The recommendations are precise about what should change, by whom, by when. The matter is closed in writing, with a clear final document, even when the finding is that no adverse action is warranted.
Inquiries that do not anticipate the after-life become problems later. Loose findings, oral conclusions, undocumented decisions — these create the conditions for a successor matter, two years on, in which the institution cannot reconstruct what was decided, by whom, on what basis. Every inquiry's worst possible outcome is not an adverse finding. It is the absence of any finding at all — a matter that was once examined and is now legally and operationally ambiguous.
— V. A closing observation.
The instinct of most boards encountering a sensitive matter is to act quickly. Often this is the wrong instinct. The investigative discipline that survives discovery is not the discipline that produces the fastest answer. It is the discipline that produces the answer that holds — under scrutiny by parties who were not present, under examination by counsel who were not retained at the start, sometimes years after the matter is conducted.
The investment of two additional weeks at the front end of an inquiry, spent establishing privilege structure, sequencing the work, and building the documentation architecture, is among the highest-leverage governance decisions a board can make. It costs comparatively little. It compounds enormously in the after-life — the part of the matter the board hopes never to encounter, but which has a way of arriving anyway.
Build the inquiry to survive the part that has not yet happened. That part is what defines the inquiry's value.
