they will need to
have policies in place regarding the
conduct of investigations and will be
expected to know where data is stored
and how it can be speedily retrieved.
Companies must also demonstrate
that they have taken action to prevent
recurrence, beginning with ringfencing
the issues to understand
whether the perpetrators engaged
in other, unrelated wrongdoing or
whether similar misconduct occurred
elsewhere in the organization