In the classic board game Clue, your goal is to identify who committed the crime, where the crime was committed, and what weapon was used.
What you don’t have to identify is why the criminal did what he did. And you certainly don’t have to figure out what others could have done to prevent the crime.
In workplace investigations, these last two elements are important and often overlooked. They are overlooked because they are more difficult to identify and because management might have to share the blame for the wrongdoing.
Asking “how” allows us to improve compliance program. Asking “why” allows us to improve our ethical culture.
No matter its quality, no program can survive a bad culture.