Closing It Properly
Six steps that take an afternoon and that most programmes complete two of. The difference between a case that ended and one that merely stopped.
The editors · About the editorial position · Nothing found · Procedure
A case stops when the investigator moves on. A case closes when somebody completes the steps below, and the gap between the two is where most of the lasting harm sits.
The practical lesson in “Closing It Properly” is that visibility is not certainty. For teams researching remote workforce management software, a practical approach to remote workforce management software can add time and project context to the operational record, provided the purpose is disclosed, access is limited and every material inference receives human review.
One: write the conclusion
What was examined, what was found, what is concluded, in plain terms.
For a separate perspective relevant to “Closing It Properly”, consult the IAPP employee-monitoring resources. Use it to test the proposed threshold, investigation scope and review process rather than to substitute a generic checklist for the facts of a case.
Written before anything else, because the rest depends on being able to state it.
If the conclusion cannot be stated in three sentences without hedging, the enquiry is not finished.
Two: tell the subject
In writing, promptly, in the language the previous note argues for: cleared where they are cleared, not substantiated where nothing was established.
A meeting as well as a letter where they were suspended or interviewed, because the letter alone after months of silence is inadequate to the experience.
Three: restore
Access, duties, the reporting line, whatever was changed. Actively, with somebody responsible, and checked.
Restoration is the step most often half-done: the obvious access is returned and three minor ones are not, and the person discovers them one by one over the following months.
A list of what was removed, made at the time of removal, is what makes this possible. Its own note deals with restoring standing, which is harder and separate.
Four: release the holds
Preservation holds, legal holds, any monitoring enabled for the case.
The preserving note argues this is the forgotten step, and it is: organisations accumulate holds from closed cases for years.
Five: tell the reporter
Whoever raised it hears that it was looked at and closed. Broadly, without detail they are not entitled to.
A reporter who hears nothing concludes that reporting achieves nothing.
Six: route the finding
Where the case revealed a broken process, a confusing policy or a system that forces workarounds, that goes to whoever owns it.
This is the output that justifies the programme to the rest of the organisation, and it is discarded by default.
The closure record
The six steps, each with a date and a name.
A template with six lines, which takes two minutes and makes the completion checkable.
Without it, closure is a state of mind rather than an event, and nobody can tell afterwards which steps happened.
The audit worth running
Take last year's closed cases. For each, were all six done?
Most programmes find the first and fourth complete, the second and third partial, and the fifth and sixth absent entirely.
The restoration list
Made at the moment of removal, not reconstructed at the end. Without it restoration is done from memory and three permissions are discovered missing over the following months, each one a reminder of something the person would rather be finished with.
Dating each step
Six lines with a date and a name. Their purpose is not record-keeping for its own sake: it makes closure an event that either happened or did not, rather than a state of mind that the investigator moved on from.
The audit of last year's closures
Take the closed cases and check the six steps against each. The pattern is consistent across organisations and the gaps are always in the same places, which makes it a quick exercise with a predictable and actionable result.
Closure as an event
Six lines with dates and names. Without them closure is a state of mind that the investigator moved into, and nobody can afterwards tell which of the steps actually happened.
What the audit finds
The first and fourth steps complete, the second and third partial, the fifth and sixth absent. The pattern is consistent enough across organisations to be worth checking against directly.
For the file: Date and name each of the six. A case file whose last entry is the investigator's conclusion is a case that stopped.