Conducting Investigations & Case Study Analysis

Table of Contents
1. Understanding Workplace Investigations
2. The Investigation Process: Step by Step
3. Case Study Analysis: Learning from Real Investigations
4. Common Investigation Challenges and How to Address Them
5. Legal and Ethical Considerations
6. Analysing Investigation Reports
7. Best Practices for Investigation Excellence
8. Key Terms Recap
9. Common Mistakes and Misconceptions
10. Summary
11. Practice Questions
View more

Understanding Workplace Investigations

Imagine you're at work and someone reports that money is missing from the petty cash box. Or a manager receives an anonymous email claiming that a colleague is being harassed. What happens next? Does the company just ignore it? Fire someone immediately? Call the police?

The answer is: conduct an investigation. A workplace investigation is a structured, fair process that organisations use to gather facts, interview people, examine evidence, and reach conclusions about allegations or incidents. Think of it like being a detective, but instead of solving crimes on TV, you're solving workplace problems with real consequences for real people.

Investigations aren't just nice to have-they're often legally required. Laws around discrimination, harassment, safety violations, and fraud require employers to take complaints seriously and respond appropriately. A poorly handled investigation can lead to lawsuits, damaged reputations, lost talent, and toxic work cultures. A well-conducted investigation protects everyone: the person making the complaint, the person accused, the organisation, and even bystanders.

Why Investigations Matter

Let's talk about what's at stake. When someone raises a concern-whether it's about theft, discrimination, safety hazards, or policy violations-the organisation has a responsibility to respond. Here's why investigations are critical:

• Legal compliance: Many laws require employers to investigate complaints of harassment, discrimination, retaliation, and safety violations. Failing to investigate can result in regulatory penalties and lawsuits.
• Fairness and justice: Investigations ensure that decisions are based on facts, not rumours, assumptions, or personal biases. Everyone deserves to have their side heard.
• Organisational trust: When employees see that problems are taken seriously and handled professionally, they trust leadership more and feel safer speaking up in the future.
• Preventing escalation: Small issues can become big problems. A harassment complaint ignored today could become a hostile work environment affecting an entire team tomorrow.
• Protecting the accused: Not all allegations are true. A fair investigation protects innocent people from false accusations and career damage.

Consider this real-world example: In 2017, Uber faced massive backlash after a former engineer, Susan Fowler, published a blog post detailing systematic sexual harassment and a failure by HR to investigate her complaints properly. The company's reputation plummeted, the CEO resigned, and Uber had to overhaul its entire culture. The cost of not investigating properly was catastrophic.

The Investigation Process: Step by Step

Conducting a workplace investigation isn't about gut feelings or quick judgments. It's a methodical process with clear stages. Let's walk through each one.

Step 1: Receiving and Assessing the Complaint

It all starts when someone raises a concern. This might come through:

• A formal written complaint
• A verbal report to a manager or HR
• A hotline or whistleblower channel
• An anonymous tip
• Observations by supervisors (for example, noticing inventory discrepancies)

Once a complaint is received, the first step is assessment. Not every issue requires a full investigation. The organisation needs to ask:

• Is this allegation serious enough to warrant an investigation?
• Does it involve potential policy violations, legal issues, or safety risks?
• Is there enough information to proceed?
• Is an investigation the right response, or should this be handled differently (like through mediation or coaching)?

For example, if someone complains that a colleague chews gum too loudly, that's probably not an investigation-worthy issue-it might be handled through a conversation. But if someone alleges that a supervisor is demanding sexual favours in exchange for promotions, that absolutely requires a formal investigation.

Step 2: Planning the Investigation

Before diving in, investigators need a plan. Poor planning leads to missed evidence, legal mistakes, and unfair outcomes. Key planning questions include:

• Who will investigate? Should it be handled internally by HR, by a manager, by a specialised investigator, or by an external third party?
• What are we investigating? Clearly define the specific allegations. "John is mean" is too vague. "John made three derogatory comments about Maria's accent on October 5th and 12th" is specific and investigable.
• What evidence do we need? Identify potential witnesses, documents, emails, security footage, financial records, or other materials.
• What's the timeline? Investigations should be prompt. Waiting months undermines credibility and memories fade. Most organisations aim to complete investigations within 2-4 weeks, though complex cases may take longer.
• Who needs to know? Maintain confidentiality. Only those who need to know should be informed.

Choosing the Right Investigator

The investigator must be:

• Impartial: No conflicts of interest, no personal relationships with parties involved, no preconceived opinions.
• Trained: Understands interview techniques, evidence handling, legal requirements, and bias awareness.
• Credible: Respected within the organisation, seen as fair and professional.

In serious cases-especially those involving senior executives or potential litigation-companies often hire external investigators to ensure objectivity.

Step 3: Gathering Evidence

This is the heart of the investigation. Evidence comes in two main forms:

• Documentary evidence: Emails, text messages, personnel files, timesheets, financial records, security camera footage, photos, policies, training records, and so on.
• Testimonial evidence: Information gathered through interviews with the complainant, the accused, and witnesses.

Document Review

Investigators should gather and carefully review all relevant documents. For instance, if investigating an allegation of time theft, reviewing timecards and security badge swipes would be essential. If investigating harassment, reviewing email correspondence and prior HR complaints could reveal patterns.

Always preserve documents in their original form. Don't alter, delete, or destroy anything-that could be considered spoliation of evidence and create serious legal problems.

Conducting Interviews

Interviews are where investigators hear directly from people involved. Here's the typical order:

1. Interview the complainant first: Get the full story, including specific details like dates, times, locations, what was said or done, who else was present, and any supporting evidence.
2. Interview witnesses: Talk to anyone who might have relevant information. Keep an open mind-sometimes witnesses reveal things the complainant didn't mention.
3. Interview the accused last: This allows the investigator to gather facts first, then present the allegations and hear the accused person's response.

Effective interviewing requires skill. Here are some best practices:

• Use open-ended questions: Instead of "Did you see John yell at Maria?" (yes/no), ask "What did you observe during the meeting on October 5th?" This gets more detailed, unbiased information.
• Listen actively: Don't interrupt, don't argue, don't show judgment. Take detailed notes or record (with consent, where legal).
• Ask follow-up questions: "What happened next?" "How did that make you feel?" "Who else was there?" "Do you have any documentation?"
• Maintain confidentiality: Remind interviewees that the investigation is confidential and they shouldn't discuss it with others (though legally, you usually can't prohibit all discussion-employees have rights to talk about working conditions).
• Avoid leading questions: Don't suggest answers. "He was really angry, wasn't he?" is leading. "How did he seem to you?" is not.
• Watch for bias: Don't make assumptions based on someone's position, appearance, or likability. Stick to facts.

Here's a real example: In 2018, CBS investigated allegations against CEO Les Moonves following reports of sexual misconduct. The investigation involved interviewing dozens of witnesses, reviewing communications, and examining patterns of behaviour over many years. Ultimately, Moonves was terminated and forfeited $120 million in severance-a consequence directly resulting from thorough investigative work.

Step 4: Analysing the Evidence

Once all evidence is gathered, the investigator must make sense of it. This isn't about proving guilt "beyond a reasonable doubt" like in criminal court. Workplace investigations typically use a lower standard called preponderance of the evidence, sometimes described as "more likely than not" or "greater than 50% probability."

Ask yourself:

• What does the evidence show?
• Are there consistencies or contradictions?
• Are witnesses credible? Do their stories align or conflict?
• Is there corroborating evidence (like documents or additional witnesses) supporting one version of events?
• Are there alternative explanations?

Assessing Credibility

When testimonies conflict-and they often do-investigators must assess credibility. Consider:

• Consistency: Does the person's story stay consistent over time and across details?
• Plausibility: Does the account make logical sense?
• Demeanour: While not definitive (people react to stress differently), extreme nervousness or evasiveness might be noteworthy.
• Corroboration: Is the testimony supported by other evidence?
• Bias or motive: Does the person have a reason to lie or exaggerate?

Remember: being "credible" doesn't automatically mean someone is telling the truth, and being nervous doesn't mean someone is lying. Use credibility assessment as one tool among many.

Step 5: Reaching a Conclusion

Based on the evidence, the investigator determines whether the allegations are:

• Substantiated: The evidence supports that the alleged violation occurred.
• Unsubstantiated: There isn't enough evidence to conclude the violation occurred, but it's not disproven either (basically "we don't know").
• Unfounded: The evidence shows the allegation is false.

If the allegation is substantiated, the investigator typically recommends appropriate action, which might include:

• Coaching or counselling
• Additional training
• Formal warnings
• Suspension
• Demotion or reassignment
• Termination
• Changes to policies or procedures to prevent recurrence

The response should be proportionate to the violation. A first-time minor policy violation shouldn't result in termination, but serious misconduct like theft, violence, or severe harassment might warrant immediate dismissal.

Step 6: Documentation and Follow-Up

Every investigation must be thoroughly documented. The investigation report typically includes:

• Summary of the allegations
• List of evidence reviewed
• Summaries of interviews conducted
• Analysis of evidence
• Findings and conclusions
• Recommendations for action

This documentation serves multiple purposes: it shows the organisation took the matter seriously, it protects against legal claims, it provides a record if similar issues arise later, and it ensures consistency in how cases are handled.

After the investigation concludes, communicate outcomes appropriately. The complainant should be told that the investigation is complete and action has been taken (though specific disciplinary details are usually confidential). The accused should be informed of findings and any consequences. Sometimes, broader organisational changes are needed, like policy updates or training for all staff.

Case Study Analysis: Learning from Real Investigations

One of the best ways to understand investigations is to study real examples. Let's examine several case studies that illustrate key principles.

Case Study 1: Wells Fargo Fake Accounts Scandal (2016)

What happened: Employees at Wells Fargo, under intense sales pressure, created millions of fake bank accounts and credit cards without customer knowledge or consent. This went on for years.

The investigation: After journalists and regulators started asking questions, internal and external investigations revealed systemic problems. Investigators reviewed account data, interviewed employees and managers, and examined sales practices and incentive structures.

Findings: The investigation found that approximately 3.5 million unauthorised accounts were created. Employees faced unrealistic sales quotas and feared retaliation if they didn't meet targets. Management either didn't know or turned a blind eye to the fraud.

Consequences: Wells Fargo paid over $3 billion in fines, fired over 5,000 employees, the CEO resigned, and the bank's reputation suffered massive damage. The company also faced numerous lawsuits.

Lessons learned:

• Investigations must look at systemic issues, not just individual bad actors. The fake accounts weren't just about a few dishonest employees; the pressure-cooker sales culture created the conditions for widespread misconduct.
• Early warning signs matter. Employees had flagged concerns internally for years, but investigations weren't conducted or were inadequate.
• When conducting investigations, examine incentive structures and pressures that might encourage rule-breaking.

Case Study 2: Google Walkout (2018)

What happened: The New York Times reported that Google had paid millions in exit packages to executives accused of sexual misconduct while keeping allegations quiet. In response, over 20,000 Google employees worldwide staged walkouts demanding changes.

The investigation context: Google's handling of misconduct allegations came under scrutiny. Questions arose: Were investigations fair? Were powerful executives treated differently than regular employees? Was there retaliation against complainants?

Findings and outcomes: Google committed to more transparency, ended forced arbitration for harassment and assault claims, and pledged to improve investigation processes. However, some employee activists later claimed they faced retaliation, leading to further investigations and legal action.

Lessons learned:

• Investigations must be consistent regardless of the accused person's seniority. Protecting executives while holding lower-level employees accountable destroys trust.
• Transparency matters. Employees want to know that concerns are taken seriously and investigations are fair, even if specific details remain confidential.
• Follow-up matters. The investigation doesn't end when the report is filed. Organisations must ensure no retaliation occurs and that promised changes actually happen.

Case Study 3: Theranos Fraud Investigation

What happened: Theranos, a health technology company, claimed its devices could run hundreds of tests from a single drop of blood. Whistleblowers, including former employees Tyler Shultz and Erika Cheung, raised concerns that the technology didn't work and patient results were inaccurate.

The investigation: Regulatory agencies, journalists, and eventually law enforcement investigated. They interviewed former employees, reviewed lab data, examined company communications, and tested the technology.

Findings: Theranos had misled investors, partners, and patients. Its technology didn't work as claimed. Founder Elizabeth Holmes and former president Ramesh "Sunny" Balwani were indicted on fraud charges. Holmes was convicted in 2022.

Lessons learned:

• Protect whistleblowers. Theranos initially tried to silence and intimidate those who raised concerns, using legal threats and surveillance. This backfired spectacularly and is both unethical and often illegal.
• External investigations can be necessary when internal processes fail or when leadership is complicit.
• Investigators need access to actual evidence (lab results, communications, data), not just what the company wants to show them.

Common Investigation Challenges and How to Address Them

Investigations rarely go perfectly. Here are challenges you'll encounter and strategies to handle them:

Challenge 1: Lack of Evidence

Sometimes there's a "he said, she said" situation with no witnesses and no documents. What do you do?

Strategies:

• Look for patterns. Has the accused been the subject of similar complaints before? Has the complainant made multiple unrelated complaints (which might affect credibility)?
• Look for indirect evidence, like changes in behaviour, communications with friends or colleagues, or documentation of distress (medical records, for instance).
• Assess credibility carefully using the factors discussed earlier.
• Sometimes you genuinely can't reach a firm conclusion. That's okay-document why and recommend preventive measures anyway (like additional training or policy clarification).

Challenge 2: Unwilling or Evasive Witnesses

People might fear retaliation, worry about relationships with colleagues, or simply not want to get involved.

Strategies:

• Explain the importance of their participation and reassure them about confidentiality and anti-retaliation policies.
• Make it clear that participation in investigations is expected as part of their job.
• Build rapport. Approach interviews professionally but empathetically.
• If someone is genuinely evasive or dishonest, note this in your report and consider it when assessing credibility.

Challenge 3: Emotional Intensity

Investigations often involve deeply emotional topics: harassment, discrimination, threats, or personal conflicts. People may cry, become angry, or shut down.

Strategies:

• Approach with empathy. Acknowledge emotions without making judgments. "I can see this is difficult for you."
• Offer breaks if someone is too upset to continue.
• Stay calm and professional yourself. Don't mirror anger or become defensive.
• Have resources available, like employee assistance programs or counselling referrals.

Challenge 4: Time Pressure

Organisations often want investigations completed quickly, but rushing leads to mistakes.

Strategies:

• Set realistic timelines during planning.
• Communicate with leadership about why thoroughness matters more than speed.
• In genuinely urgent situations (like workplace violence threats), take immediate safety measures while conducting a thorough investigation in parallel.

Challenge 5: Power Dynamics

When a complaint involves someone with power (a senior executive, a rainmaker client, a beloved manager), there's pressure to go easy or ignore the issue.

Strategies:

• Treat everyone the same regardless of position. Apply the same standards.
• Consider using external investigators for high-stakes cases to ensure impartiality.
• Document everything meticulously to show fairness.

Legal and Ethical Considerations

Investigations aren't just about finding truth-they must also be conducted legally and ethically. Here are key principles:

Confidentiality vs. Transparency

Investigations should be confidential to protect everyone involved, prevent gossip, and preserve evidence. However, there are limits:

• You usually can't prohibit employees from discussing their own experiences or terms and conditions of employment (that's protected under labour laws in many jurisdictions).
• You can ask for discretion and explain why confidentiality helps the process.
• Outcomes may need to be shared with certain people (like supervisors who need to implement disciplinary action).

Anti-Retaliation

It's illegal to retaliate against someone for raising a complaint in good faith or participating in an investigation. Retaliation includes:

• Termination, demotion, or pay cuts
• Undesirable reassignments
• Exclusion from meetings or opportunities
• Hostile treatment by supervisors or colleagues

Organisations must actively prevent retaliation. Monitor for it after investigations conclude. If it occurs, address it immediately and seriously.

Due Process and Fairness

Everyone deserves fair treatment during an investigation:

• The accused must be informed of allegations and given an opportunity to respond.
• Evidence must be considered objectively.
• Conclusions should be based on evidence, not bias or assumptions.
• Processes should be consistent across similar cases.

Privacy

Respect privacy while gathering evidence. For example:

• Accessing someone's work email is typically acceptable, but personal devices or accounts may require consent or legal authority.
• Surveillance must comply with laws and company policies.
• Medical or other sensitive personal information should only be accessed if genuinely relevant.

Privilege and Legal Risk

In some cases, investigation documents could be subject to legal discovery if a lawsuit follows. Organisations sometimes conduct investigations under attorney-client privilege (with lawyers leading or overseeing) to protect confidentiality. This is complex and jurisdiction-specific-consult legal counsel when appropriate.

Analysing Investigation Reports

Often, you won't conduct investigations yourself-you'll receive investigation reports and need to analyse them. Here's what to look for:

Completeness

• Were all relevant witnesses interviewed?
• Was all relevant evidence reviewed?
• Are there gaps or unanswered questions?

Impartiality

• Does the report show bias toward or against any party?
• Are conclusions supported by evidence, or do they seem predetermined?
• Does the investigator acknowledge uncertainty where appropriate?

Credibility Analysis

• How did the investigator assess credibility?
• Are the reasons for believing one person over another clearly explained?

Clarity of Findings

• Is it clear what was substantiated and what wasn't?
• Are conclusions specific or vague?

Recommendations

• Are recommended actions proportionate to findings?
• Do they address not just individual accountability but also systemic issues?
• Are they realistic and implementable?

If a report seems inadequate, it may be necessary to request additional investigation or bring in external expertise.

Best Practices for Investigation Excellence

Let's consolidate the most important practices for conducting and analysing investigations:

• Act promptly: Don't delay when complaints arise. Prompt action shows seriousness and prevents evidence from disappearing.
• Stay objective: Park your assumptions, biases, and personal feelings. Let evidence guide you.
• Be thorough: Don't take shortcuts. Gather all relevant evidence and talk to all relevant people.
• Document everything: Detailed documentation protects the organisation, ensures consistency, and creates accountability.
• Maintain confidentiality: Share information only on a need-to-know basis.
• Treat everyone with respect: Investigations are stressful. Be professional, empathetic, and fair to all parties.
• Follow up: Ensure recommended actions are implemented and monitor for retaliation.
• Learn and improve: After each investigation, reflect on what went well and what could be better. Update policies and training as needed.

Key Terms Recap

• Workplace investigation - A structured, fair process to gather facts, interview people, and reach conclusions about workplace allegations or incidents.
• Complainant - The person who raises a concern or makes an allegation.
• Accused - The person alleged to have committed misconduct.
• Preponderance of the evidence - The standard of proof typically used in workplace investigations, meaning "more likely than not" or greater than 50% probability.
• Substantiated - A finding that the evidence supports the allegation.
• Unsubstantiated - A finding that there isn't enough evidence to conclude whether the allegation is true or false.
• Unfounded - A finding that the evidence shows the allegation is false.
• Documentary evidence - Physical or digital records like emails, contracts, videos, or financial statements used in an investigation.
• Testimonial evidence - Information gathered through interviews and statements from witnesses, complainants, or the accused.
• Credibility assessment - The process of evaluating how believable a witness or source of information is.
• Retaliation - Negative action taken against someone for raising a complaint or participating in an investigation.
• Confidentiality - The practice of limiting information sharing about an investigation to those with a legitimate need to know.
• Spoliation of evidence - The destruction, alteration, or concealment of evidence relevant to an investigation or legal proceeding.
• Due process - Fair treatment and the opportunity to respond to allegations before disciplinary action is taken.
• Impartiality - The quality of being unbiased, without conflicts of interest or preconceived conclusions.

Common Mistakes and Misconceptions

• Mistake: Assuming the first story you hear is the truth.
  Reality: Every allegation deserves investigation. Don't rush to judgment before gathering all evidence.
• Mistake: Treating investigations like criminal trials requiring "beyond reasonable doubt" proof.
  Reality: Workplace investigations use a lower standard-preponderance of the evidence (more likely than not).
• Mistake: Sharing investigation details widely or gossiping about them.
  Reality: Confidentiality protects everyone and preserves the integrity of the process.
• Mistake: Only interviewing the complainant and accused, skipping witnesses.
  Reality: Witnesses often provide crucial corroborating evidence or alternative perspectives.
• Mistake: Delaying investigations because they're uncomfortable or inconvenient.
  Reality: Delays damage credibility, allow evidence to disappear, and can increase legal liability.
• Mistake: Treating senior executives with kid gloves while holding others to strict standards.
  Reality: Consistent application of policies regardless of position is essential for fairness and trust.
• Mistake: Thinking that if someone is nervous during an interview, they must be lying.
  Reality: People react to stress differently. Nervousness doesn't indicate dishonesty.
• Mistake: Ignoring systemic issues and only blaming individuals.
  Reality: Often, misconduct happens because organisational culture, incentives, or policies create conditions for it. Address root causes.
• Mistake: Assuming an unsubstantiated finding means the complainant lied.
  Reality: Unsubstantiated means there wasn't enough evidence to prove it either way-it's not the same as unfounded.
• Mistake: Forgetting to follow up after the investigation concludes.
  Reality: Monitoring for retaliation, ensuring disciplinary actions are implemented, and making systemic changes are all part of a complete investigation process.

Summary

1. Workplace investigations are structured processes used to fairly and objectively examine allegations of misconduct, policy violations, or other workplace issues. They're legally required in many situations and essential for maintaining trust and fairness.
2. The investigation process follows key steps: receiving and assessing the complaint, planning the investigation, gathering evidence (both documentary and testimonial), analysing that evidence, reaching a conclusion, and documenting everything thoroughly.
3. Evidence in workplace investigations is judged by the preponderance of the evidence standard (more likely than not), which is lower than the "beyond reasonable doubt" standard used in criminal cases.
4. Effective interviews use open-ended questions, active listening, and careful follow-up. Investigators must assess witness credibility by considering consistency, plausibility, corroboration, and potential bias.
5. Investigations can result in findings that allegations are substantiated (proven), unsubstantiated (not enough evidence), or unfounded (disproven). Responses should be proportionate to the violation and address both individual accountability and systemic issues.
6. Real-world examples like Wells Fargo, Uber, Google, and Theranos demonstrate the high stakes of investigations and the importance of thoroughness, consistency, transparency, and protection for whistleblowers.
7. Common challenges include lack of evidence, unwilling witnesses, emotional intensity, time pressure, and power dynamics. These can be addressed through careful planning, empathy, objectivity, and consistent application of standards.
8. Legal and ethical considerations include maintaining appropriate confidentiality, preventing retaliation, ensuring due process and fairness, respecting privacy, and documenting thoroughly to protect against legal risk.
9. When analysing investigation reports, assess completeness, impartiality, credibility analysis, clarity of findings, and appropriateness of recommendations.
10. Best practices include acting promptly, staying objective, being thorough, documenting everything, maintaining confidentiality, treating everyone with respect, following up on outcomes, and continuously learning and improving processes.

Practice Questions

Question 1 (Recall): What is the standard of proof typically used in workplace investigations, and how does it differ from criminal proceedings?

Question 2 (Application): You're investigating an allegation that a manager, Sarah, has been giving preferential treatment to certain employees. You've interviewed the complainant. Who else should you interview, and what documentary evidence might be relevant?

Question 3 (Analytical): An investigation reveals that three employees witnessed a supervisor making inappropriate jokes, but the supervisor denies it happened and says the witnesses are conspiring against her because she recently gave them poor performance reviews. How would you assess credibility in this situation?

Question 4 (Application): During an investigation, the accused person asks you, "Who complained about me? I have a right to know!" How should you respond, and why?

Question 5 (Analytical): After completing an investigation that substantiated harassment allegations against a popular team leader, several employees who weren't directly involved begin treating the complainant coldly and excluding them from social events. What issue does this raise, and what should the organisation do?

Question 6 (Recall): What's the difference between a finding of "unsubstantiated" and "unfounded" in an investigation?

Question 7 (Application): You receive an anonymous complaint alleging financial fraud by the CFO. What challenges does this present, and how would you proceed with planning the investigation?

Question 8 (Analytical): Review this scenario: A company investigates sexual harassment allegations against a senior executive. The investigation finds the allegations substantiated, but the company gives the executive a warning and allows them to remain in their position, while a lower-level employee who was found to have committed a similar violation last year was terminated. What problem does this create, and what principle is being violated?