A disciplinary investigation should establish relevant facts before the employer decides whether a disciplinary case should proceed. Its terms of reference should identify the allegation and evidence needed, without instructing the investigator to prove a predetermined conclusion. [1]
Define scope and preserve evidence
Record the alleged conduct, period and policies involved. Identify documents, systems and witnesses, including material that may contradict the allegation. Preserve relevant records before routine deletion, while keeping searches proportionate and access controlled.
Choose an investigator with suitable independence and explain their role. If suspension is considered, assess its necessity and alternatives rather than treating it as an automatic punishment.
Separate findings from sanction
Interview witnesses with open questions and keep accurate notes. Give the employee a fair opportunity to explain relevant facts. Distinguish direct evidence, inference and unresolved disagreement in the report.
The report should explain the enquiries made, evidence considered and factual conclusions within its remit. Avoid deciding a sanction that belongs to a later hearing. Disciplinary preparation for employees shows the information needed to respond; grievance handling may be relevant if a connected complaint arises. Decide how overlapping issues will be handled rather than ignoring one process.
Write terms of reference that permit an open enquiry Identify the alleged event, relevant period and questions the investigator must address. State whether the task is to establish facts and assess whether there is a case to answer, rather than determine a sanction. Avoid instructions framed as proving misconduct or confirming a manager's suspicion. Acas describes investigation as gathering evidence from all sides to support a fair decision. [1] A clear remit should also explain how newly identified issues will be referred for a scope decision, so the enquiry neither expands without control nor ignores material information.
Choose an investigator with suitable competence and independence for the circumstances. Record any previous involvement and how a potential conflict will be addressed. In a small organisation, an external investigator may sometimes assist, but their role and access still need definition. Agree the reporting line, confidentiality expectations and practical resources. The person commissioning the work should not privately direct factual conclusions while presenting the report as independent. Keep substantive instructions and changes to scope on the record so the process can later be understood from more than the final report.
Preserve evidence before it disappears routinely Identify relevant email, messaging, access logs, documents or physical records and the normal deletion periods affecting them. Arrange proportionate preservation through authorised staff. Record what was preserved, by whom and from which source, keeping original material distinct from working copies. Do not search every employee's data without a defined connection to the allegation. Where sensitive information or monitoring is involved, obtain appropriate advice on access and handling. The goal is to retain material needed for a fair enquiry while avoiding unnecessary collection or disclosure of unrelated personal information.
Consider immediate workplace arrangements on their own merits. Suspension should not be an automatic response or presented as a finding of guilt. Assess the specific concern, alternatives and review arrangements, and document the reason for the chosen measure. If people continue working together, establish how evidence and participants will be protected without preventing legitimate support or representation. Tell those affected what the temporary arrangement means and when it will be reviewed. A precaution left unexplained can become a separate dispute about treatment before the underlying allegation has been investigated.
Ask questions that test both supporting and contrary evidence Prepare open questions tied to the facts needing clarification. Ask witnesses what they observed, when and how they know, distinguishing direct knowledge from inference or another person's account. Give them an opportunity to review the accuracy of the meeting record. Do not force agreement with a summary that changes their meaning. If accounts conflict, identify the conflict and consider what further evidence could resolve it. The report should explain why one account is preferred where a finding is made, rather than treating seniority or confidence as a substitute for evidential reasoning.
Give the employee concerned an appropriate opportunity to explain relevant facts and identify evidence in their favour. Clarify the meeting's investigatory purpose and any applicable accompaniment or adjustment arrangements. If new material changes the case, consider whether a further response is needed. Keep questions neutral and avoid promising that cooperation guarantees a particular outcome. Where an employee cannot participate in the proposed format, assess alternatives and record the decision. A process can be proportionate without omitting a meaningful opportunity to respond to matters central to the enquiry.
Report findings with their evidential limits Structure the report around the questions in the remit. Identify the evidence obtained, significant gaps, agreed facts and disputed matters. Separate findings from recommendations and explain the basis for each conclusion. If a record could not be obtained, state the limitation and its effect rather than filling the gap with assumption. Avoid deciding a disciplinary penalty where that belongs to a later stage. The decision-maker needs an intelligible account of the investigation, not a narrative that conceals contrary evidence or presents an unresolved allegation as established fact.
Arrange a controlled handover of the report and supporting material. Decide what information needs to be supplied for any subsequent hearing and how unrelated personal data will be handled fairly. Preserve the investigation record under an appropriate retention decision, including where a dispute requires continued preservation. If a connected grievance or protected disclosure emerges, identify how it will be assessed without losing the original scope. The completed process should show that relevant enquiries were made and competing accounts considered before the employer decides the next step.
Frequently asked questions
Should an investigator be asked to prove the allegation?
No. The remit should permit an open examination of relevant evidence, including material that contradicts the allegation, before deciding whether there is a case to answer.
Is suspension an automatic part of a disciplinary investigation?
No. Assess the particular risk, alternatives and review arrangements, and make clear that a temporary measure is not a finding of misconduct.
How should conflicting witness accounts appear in the report?
Identify the disagreement, supporting evidence and reasoning behind any preferred account. Seniority or confidence alone should not replace an explanation of the finding.
Can the investigation report decide the disciplinary sanction?
Only within an appropriate remit and process; ordinarily fact finding should be distinguished from the later hearing and sanction decision to preserve fairness.
What should happen if relevant records cannot be recovered?
Document the enquiries made, the missing material and the effect on conclusions. Do not replace the gap with an unsupported assumption about what it would show.
Official sources
Sources checked: 9 September 2026. Check the linked guidance for subsequent changes.
General information only. The appropriate action depends on your circumstances and the applicable jurisdiction.
Report a correction