How to Conduct a Workplace Investigation

A sound workplace investigation is not a search for a predetermined answer. It is a fair, objective process for identifying the questions that must be answered, gathering relevant information from all reasonable sources, evaluating that information consistently, and preserving a record that explains the result.

1. Respond promptly and stabilize the situation

Record the initial concern accurately, including when and how it was received. Consider whether immediate, proportionate steps are needed to protect people, prevent retaliation, preserve evidence, or avoid interference with witnesses. Interim measures should not be treated as a finding or punishment.

Identify records that may disappear through routine deletion, device replacement, staff departure, or limited retention. Issue appropriate preservation directions through authorized channels and document what was preserved, by whom, and when.

2. Confirm authority, competence, and independence

The investigator should understand the mandate, relevant policy, reporting line, and limits of the role. Check for personal, reporting, financial, or prior-involvement conflicts. If complete independence is not possible, disclose the concern to the decision-maker and document the safeguards used.

The person accused of misconduct should not control the investigation. The U.S. Equal Employment Opportunity Commission describes prompt, thorough, and impartial investigation as an important element of an effective response to harassment complaints.

3. Convert the concern into clear allegations and a defined scope

Separate a broad complaint into questions that can be investigated. For each allegation, record the conduct claimed, the people involved, the approximate time and place, and the policy or expectation potentially engaged. Avoid wording that assumes the allegation is already true.

Document the terms of reference: what will be investigated, what is outside scope, who will receive the report, whether recommendations are requested, and which decision standard applies. The governing law or policy—not a generic web guide—determines the appropriate standard and procedure.

4. Build an investigation plan and evidence map

Create a working plan that connects each allegation to potential witnesses and evidence sources. Common sources include emails, messages, personnel or scheduling records, policies, photographs, video, access logs, meeting records, prior reports, and physical items. Record known retention deadlines and access restrictions.

• Start with evidence at greatest risk of loss or alteration.
• Collect through authorized methods and preserve original files where practical.
• Assign a unique identifier to every item.
• Record source, collection date, original filename, and relevance.
• Keep an issue list so new evidence can be followed without losing the original scope.

5. Conduct fair, well-planned interviews

Prepare topics rather than a script that forces every interview into the same order. Begin with open questions, then clarify dates, locations, exact words or actions, people present, documents, and how the person knows each fact. Distinguish direct knowledge from assumption, opinion, or information received from someone else.

Interview the complainant, the respondent, and others who could reasonably hold relevant information. Give the respondent a meaningful opportunity to understand and answer the material allegations, subject to applicable requirements. Ask for information that both supports and challenges each account.

Explain the purpose of the meeting, the limits of confidentiality, applicable representation rights, expectations concerning retaliation, and how notes or statements will be handled. Review important points before ending and ask what else should be considered.

6. Organize and analyze the evidence

Evaluate evidence allegation by allegation. Build a chronology, identify points of agreement and conflict, and connect every important conclusion to a source. Consider reliability and credibility using consistent factors, such as opportunity to observe, detail, internal consistency, corroboration, motive, contemporaneous records, and whether an account changed when challenged.

A credibility judgment should not rest on demeanor alone. Cultural differences, disability, trauma, language, memory, communication style, and the stress of an investigation can affect presentation without determining truthfulness.

7. Reach a separate finding for each allegation

Apply the standard required by the governing policy or law. State the allegation, identify the evidence considered, explain material conflicts, and show how the evidence supports the result. Keep factual findings separate from employment decisions or corrective action unless the mandate specifically combines those responsibilities.

If the evidence is insufficient, say so. “Not substantiated” does not necessarily mean that the concern was fabricated; it means the required standard was not met on the available evidence.

8. Prepare a clear investigation report

A useful report normally identifies the mandate, scope, process, evidence, relevant facts, analysis, and finding for each allegation. It should allow an authorized reviewer to understand what was done and why the conclusion follows without exposing unnecessary personal information.

• Use neutral language and distinguish evidence from analysis.
• Identify limitations, unavailable evidence, and material procedural decisions.
• Check names, dates, quotations, and evidence references.
• Protect the report according to applicable privacy and records requirements.

9. Close the matter and preserve follow-up

Provide outcome information to the appropriate people as permitted or required, preserve the final record, and document any authorized corrective or preventative action separately. Monitor for retaliation and complete outstanding evidence-return, retention, access, or appeal steps.

If a material error is discovered later, preserve the original record and add a dated correction explaining what changed, why it changed, who authorized it, and whether the finding or decision was affected.

Common mistakes to avoid

• Starting interviews before defining the allegations and mandate.
• Allowing a conflicted person to direct the investigation.
• Collecting only evidence that supports the initial complaint or management’s first impression.
• Promising absolute confidentiality that cannot be maintained.
• Failing to preserve short-retention records promptly.
• Combining allegations into one vague overall conclusion.
• Editing signed statements or final notes without a visible correction history.
• Writing conclusions that cannot be traced to identified evidence.

Sources and further reading

• U.S. EEOC: Employer liability and harassment investigations
• U.S. EEOC: Checklist for reporting systems and investigations
• Acas: Preparing for an investigation
• Acas: Carrying out an investigation