Investigations, Enforcement, and Discipline
What is tested
Investigations convert allegations into facts; enforcement and discipline convert findings into consequences. Know intake and triage, conflict screening, investigation planning, evidence preservation, interviews, documentation, escalation thresholds, independence, confidentiality, and consistent discipline. Privilege questions appear: attorney-client privilege can protect investigator communications when counsel directs the work for the purpose of legal advice - it is not automatic and can be waived through loose handling.
Concepts to name
Allegation versus finding, substantiated versus unsubstantiated versus insufficient evidence, the case management log, referral to remediation for root cause, discipline matrices (severity, intent, history), consistency across seniority levels, and documentation of rationale. The DOJ asks whether discipline was applied consistently and whether misconduct was tracked for patterns.
Traps
Handing a compliance matter to HR alone breaks independence; so does a CCO investigating their own supervisor. Skipping the conflict check is a classic distractor. Discipline that spares a top performer is a program failure even if the investigation was flawless. Promising leniency without authority, or failing to preserve evidence such as laptops, texts, and backups, are common scenario failures.
Rule of thumb
Use a discipline matrix plus a written rationale. Define sanction ranges by severity, intent, and history; document why the chosen sanction falls where it does; apply the same matrix above and below the director line.
Worked example
Two employees falsify expense reports: a first-year analyst who self-reports and a regional VP caught by audit. The matrix may yield different outcomes - but the difference must be explainable by intent, self-disclosure, and history, documented in both files, and approved by the same decision-maker.