ASIS PCI study materials
ASIS PCI study resources

The Chain That Snapped

ASIS PCI · Put your knowledge to work in context.

All case studies

The Chain That Snapped

You are reviewing a completed internal theft investigation before it goes to the prosecutor. A warehouse employee, Luis, was terminated after $2,100 of copper wire went missing. The file contains: photos of the empty storage bin taken by a supervisor on a personal phone; an inventory count showing the shortfall, performed by the same supervisor; a signed confession from Luis obtained by the supervisor after a two-hour closed-door meeting; and a note that the wire was 'probably sold at the scrap yard.' There is no log of who handled the photos, no timestamp on the inventory count, and Luis now says he signed 'to end the meeting.' The prosecutor's office has a 30-day filing window.

1. Identify the evidentiary defects and assess whether this file can support a referral.

Read the worked answer

The file has serious defects that would likely sink a prosecution and could expose the company to liability.

Defects:

  1. No chain of custody for the photos - personal phone, no log, no hash, no timestamp. Their authenticity and integrity are unestablished.
  2. Investigator conflict - the same supervisor took the photos and performed the count, so there is no independent verification of the shortfall.
  3. Coerced-looking confession - a two-hour closed-door meeting by a supervisor (not trained, no witness, no recording) followed by a signature Luis now disavows. Voluntariness is highly questionable.
  4. Speculation as fact - 'probably sold at the scrap yard' is a lead, not evidence.
  5. No documentation of the interview - no notes, no second person, no advisement of consequences.

Assessment: the file cannot support a referral as-is. The 30-day window is a constraint, but filing a weak case is worse than a short delay - it risks dismissal and a wrongful-termination claim.

Immediate steps:

  • Independently re-verify the inventory shortfall with a second counter and a timestamped count.
  • Obtain the original photo files and document their metadata and custody, or discount them.
  • Re-interview Luis voluntarily with proper documentation; do not rely on the prior confession.
  • Pursue the scrap-yard lead with records requests.
  • Brief the prosecutor honestly on the gaps rather than overselling.

2. Luis now claims he signed the confession only to end the meeting. How should this affect the case and what should have happened differently?

Read the worked answer

A disavowed confession obtained under questionable conditions should be treated as unreliable and cannot carry the case alone.

Effect on the case:

  • The confession's voluntariness is now contested. A court would scrutinize the closed-door, two-hour, unwitnessed, unrecorded interview.
  • Without independent evidence (the wire, transaction records, corroborating witnesses), the confession is the weakest link, not the strongest.
  • The case must stand on physical and documentary evidence if it is to stand at all.

What should have happened differently:

  1. Trained interviewer, not the supervisor who also gathered evidence.
  2. A witness or recording present throughout.
  3. Documented, time-stamped interview notes, with the employee's own words.
  4. No promises or threats; the employee told he may leave and that the meeting is voluntary.
  5. Separate the roles - the person who counts inventory and photographs the bin should not also conduct the admission interview.
  6. Corroborate before confronting - the scrap-yard and transaction records should have been pursued first.

Recommendation: treat the confession as one data point of doubtful weight, rebuild the case on independent evidence, and document the procedural failures so the organization corrects its interview and evidence-handling practices.