Finding Statements
Write clear findings tied to observed data. Avoid speculation or labels not supported by evidence. Each finding should state what happened, where, when, and its impact on individuals or the organization.
Confidentiality and Redaction
Protect privacy by redacting identifying information where appropriate. Use aggregated data for public sharing and maintain separate files with restricted access for raw information.
Record Keeping Standards
Include date stamps, authorship, and source notes. Organize materials logically so investigators and auditors can follow the trail. Save documents in tamper resistant formats where possible.
Retention and Access Control
Define retention periods and disposal procedures. Limit access to trained personnel and implement role based permissions. Plan for data destruction when investigations conclude.