Category: Investigations and Resolutions

Investigation Scoping

Also known as: Scope of Investigation, Investigation Scope, Scoping an Investigation

Simply put

Investigation scoping is the process of setting the boundaries of an internal investigation, defining what will and will not be examined before the work begins. It typically clarifies the issues to be investigated, the people and records to be reviewed, and the actions the investigator is permitted to take. Getting the scope right helps keep the investigation focused, defensible, and appropriately limited to the matter at hand.

Formal definition

Investigation scoping is an early planning activity, generally undertaken once a determination has been made that an internal investigation is warranted, in which the investigating function defines the boundaries within which the investigation will be conducted. It typically encompasses identifying the allegations or incident to be examined, the relevant data sources, records, and custodians in play, the individuals to be interviewed (including preliminary or scoping interviews of those familiar with applicable procedures and practices), and the permissible actions available to the investigator. Scope is commonly documented as part of an investigative work plan and is intended to gather sufficient information to reach a finding under the applicable standard of proof, which in many workplace contexts is a preponderance of the evidence. Scope may be adjusted as facts develop. This entry is educational and not legal, audit, or compliance advice; the appropriate scope depends on the facts, jurisdiction, entity type, and the judgment of those directing the investigation.

Why it matters

Investigation scoping is where an internal investigation succeeds or fails before any substantive work begins. A scope that is too narrow can miss related misconduct, systemic issues, or additional custodians and records that bear directly on the finding, leaving the organization exposed to the very risk it sought to address. A scope that is too broad can consume resources disproportionately, intrude on individuals beyond what the matter warrants, and generate a sprawling record that undermines rather than supports a clear conclusion. Setting appropriate boundaries at the outset keeps the work focused, proportionate, and defensible.

Scoping also shapes the credibility of the investigation's outcome. Because many workplace investigations are conducted to reach a finding under a preponderance of the evidence standard, the scope must be wide enough to gather sufficient information to support that finding, yet disciplined enough to stay tethered to the matter at hand. Where an investigation may later be reviewed by regulators, courts, an audit committee, or opposing counsel, a documented and reasoned scope helps demonstrate that the process was deliberate rather than arbitrary. Conversely, gaps or unexplained limitations in scope can call the entire result into question.

Because facts often develop as an investigation proceeds, scope is not fixed at the moment it is set. New allegations, additional data sources, or unanticipated custodians may warrant expanding or refining the boundaries. The judgment about when and how to adjust scope, and who has authority to do so, is itself part of good governance around investigations. What constitutes an appropriate scope depends on the facts, jurisdiction, entity type, and the judgment of those directing the investigation.

Who it's relevant to

Chief Compliance Officers and Investigations Leads

Compliance functions that own or direct internal investigations use scoping to ensure each matter is examined proportionately and consistently. Setting clear boundaries at the planning stage helps allocate resources appropriately, keep the work focused on the allegations at issue, and document the rationale for what was and was not examined.

General Counsel and In-House Legal Teams

Legal teams directing or overseeing investigations rely on scope to keep the work defensible and tethered to the matter, particularly where findings may later be reviewed by regulators, courts, or opposing counsel. Scope decisions also intersect with questions of authority, documentation, and the standard of proof applied to reach a finding.

HR and Workplace Investigators

Those conducting workplace investigations use scoping to identify the issues, records, and individuals to be examined and to plan preliminary or scoping interviews of people familiar with relevant procedures and practices. Because many workplace findings rest on a preponderance of the evidence, scope must be wide enough to support a sound finding while remaining appropriately limited.

Internal Audit and Assurance Functions

Assurance functions that assess how investigations are conducted look to scoping as an indicator of process discipline. A documented, reasoned scope that is adjusted appropriately as facts develop supports the reliability of the investigation, whereas unexplained gaps can signal weaknesses in the underlying process.

Audit and Risk Committees of the Board

Board committees exercising oversight of significant investigations may seek assurance that scope was set deliberately and proportionately, without becoming involved in operational execution. Understanding how scope is defined and when it is expanded helps the committee evaluate whether a matter was handled with appropriate rigor.

Inside Investigation Scoping

Allegation Definition

A clear articulation of the specific conduct, policy, or legal concern being examined, distinguishing the reported facts from assumptions or conclusions. Scoping typically begins by framing what is alleged and what remains to be verified.

Objectives and Questions

The defined questions the investigation seeks to answer, which establish boundaries around what falls within and outside the inquiry. Clear objectives help prevent both premature narrowing and uncontrolled scope expansion.

Timeframe and Subject Matter Boundaries

The relevant period, the individuals or business units involved, and the categories of conduct under review. These parameters generally shape the volume of evidence and the resources required.

Legal and Regulatory Considerations

Identification of whether the matter potentially implicates binding legal or regulatory requirements, which vary by jurisdiction, sector, and entity type, and whether privilege, reporting obligations, or external counsel involvement may be relevant. This is educational context, not legal advice.

Independence and Ownership

Determination of who conducts and oversees the investigation, and whether the assigned function can act with appropriate independence from those potentially implicated. Accountability typically sits with a compliance, legal, internal audit, or dedicated investigations function, with governance oversight where the matter is significant.

Evidence Sources and Preservation

Identification of documents, data, systems, and witnesses likely to be relevant, together with steps to preserve information from alteration or loss once an investigation is contemplated.

Resourcing and Escalation Criteria

The skills, capacity, and any specialist support needed, and the thresholds at which a matter is escalated to senior management, a board committee, or external advisers.

Common questions

Answers to the questions practitioners most commonly ask about Investigation Scoping.

Does scoping an investigation mean deciding the outcome before the work begins?

No. Scoping defines the boundaries of an investigation, the allegations to be examined, the time period, the individuals and systems in view, and the questions to be answered, not the conclusion. A defensible scope is designed to test allegations objectively, remaining open to evidence that confirms, refutes, or reframes the initial concern. Predetermining findings undermines the integrity and credibility of the process. Scope may legitimately expand or narrow as facts emerge, but that is a function of the evidence, not of a preordained result.

Is investigation scoping just an administrative or legal task that sits outside the compliance function?

Not necessarily. Scoping decisions are typically made by whichever function owns the investigation, which varies by matter and by organization, compliance, legal, internal audit, human resources, or a special committee of the board for the most sensitive matters. Legal counsel is often involved to address privilege, regulatory reporting, and litigation risk, but scoping is a substantive exercise in defining what will be examined and why, not a purely clerical step. Which function leads and who approves the scope generally depends on the nature of the allegation, seniority of those involved, and internal escalation protocols. This is educational information, not legal advice.

How broadly or narrowly should an investigation typically be scoped?

Scope generally should be proportionate to the credibility and seriousness of the allegation, tied to the specific concerns raised rather than to open-ended fishing. A scope that is too narrow may miss related conduct or systemic issues; one that is too broad can consume resources, prolong the process, and raise fairness concerns for subjects. Many practitioners define an initial scope tightly around the reported facts and provide for documented expansion if evidence points to additional issues. The appropriate balance depends on the facts, applicable legal and regulatory considerations, and the investigator's judgment.

What should a written scoping document generally include?

A scoping document commonly identifies the allegations or issues under review, the relevant time period, the individuals and business units involved, the categories of documents and data to be collected, the key questions to be answered, and the anticipated methodology. It may also address who owns the investigation, reporting lines, privilege and confidentiality considerations, and any regulatory or self-reporting obligations that could bear on timing. Documenting the scope, and any subsequent changes with reasons, supports consistency and defensibility. The specific contents vary by organization, matter type, and jurisdiction.

When and how should the scope be changed after an investigation has started?

Scope changes are generally appropriate when evidence surfaces facts that fall outside the original boundaries but are material to understanding the conduct, such as additional individuals, time periods, or related schemes. Good practice typically involves documenting the trigger for the change, the revised scope, and the approval by whoever has authority over the investigation. Uncontrolled scope creep, by contrast, can strain resources and blur accountability. Whether a change also triggers new reporting or notification obligations depends on the facts and applicable requirements, and often warrants consultation with counsel.

How does scoping interact with legal privilege and regulatory reporting obligations?

Scoping decisions can have significant downstream consequences for privilege and for any duty to report. Whether investigation materials may be protected often depends on how and by whom the investigation is directed, which is why legal counsel is frequently involved in scoping sensitive matters. Similarly, the scope can affect what an organization knows and when, which may bear on self-reporting or disclosure timelines under applicable regimes. These considerations vary by jurisdiction, sector, and entity type. This entry is educational and does not constitute legal, audit, or compliance advice; specific privilege and reporting questions should be addressed with qualified professionals.

Common misconceptions

A broader scope always produces a more thorough and defensible investigation.

Scope should generally be proportionate to the allegation and the questions being answered. An unnecessarily broad scope can dilute focus, consume resources, and delay conclusions, while an overly narrow scope may miss related issues. Proportionality and periodic reassessment are typically more important than breadth for its own sake.

Scoping is a one-time step completed before fieldwork begins.

Scoping is generally iterative. As evidence emerges, the questions, timeframe, and subjects may need to be revisited. Practitioners typically document any changes and the rationale for them, though uncontrolled expansion without justification should be avoided.

The board should set the detailed scope of every investigation.

Detailed scoping is usually an operational responsibility of the relevant management, compliance, legal, or investigations function. The board or a committee generally exercises oversight and may set scope for the most significant matters, but attributing routine scoping decisions to the board conflates oversight with operational execution.

Best practices

Frame scope around clearly defined objectives and questions, separating verified facts from allegations and assumptions before committing resources.

Set explicit boundaries for timeframe, subjects, and subject matter, and document the rationale so the scope can be defended and revisited if new facts emerge.

Confirm early who owns the investigation and whether that function can act with sufficient independence from those potentially implicated, escalating to senior management or a board committee against predefined criteria for significant matters.

Identify and preserve relevant documents, data, and witness information promptly once an investigation is contemplated, to reduce the risk of loss or alteration.

Assess at the outset whether the matter may implicate binding legal or regulatory obligations or privilege, recognizing that requirements vary by jurisdiction, sector, and entity type, and involve qualified legal advisers where appropriate.

Treat scoping as iterative, reassessing proportionality as evidence develops while guarding against unjustified scope expansion or premature narrowing.