PRACTICAL GUIDANCE FOR HR AND INTERNAL INVESTIGATORS
Make the evidence and reasoning easy to follow.
A workplace investigation report should explain the scope, evidence, response to each allegation and reasons for the findings. This guide provides a report structure, an illustrative findings example and a checklist to use before finalising your draft.
For employers and HR teams preparing reports about workplace bullying, harassment and other workplace concerns.
Reviewed by Natalie Thomasen, General Manager. Natalie’s responsibilities include investigation report quality assurance and review of Synergy’s investigation articles.
General information for Australian workplaces. Adapt the approach to your terms of reference and applicable requirements, and obtain advice for your particular matter.
Why the report matters
A strong report:
-
Demonstrates procedural fairness—parties understand the case against them and have had a genuine opportunity to respond.
-
Shows decisions were made on the balance of probabilities with reasons linked to evidence.
-
Provides a reliable record for internal review, Fair Work and safety regulators, tribunals or courts.
-
Equips leaders with actionable recommendations while respecting privacy and role boundaries.
Before you write: set a defensible foundation
1) Define scope and terms of reference
Clarify: the allegations/questions to determine, timeframe, policies/legislation engaged, in/out of scope issues, and reporting line (who receives the report).
2) Confirm investigation standards
-
Standard of proof: balance of probabilities (is it more likely than not?).
-
Procedural fairness checkpoints: disclosure of the allegation particulars, right of reply, consideration of relevant evidence, impartial decision-maker.
3) Collect and log evidence methodically
Maintain a secure evidence register: documents, digital artefacts, interview notes/audio, physical evidence, photographs, and chain of custody where relevant.
4) Manage risk and wellbeing
Consider interim controls (e.g., separating parties), EAP referrals, and confidentiality directions proportionate to the matter.
Workplace investigation report structure
Use consistent headings. Keep page numbers, date, version control, and confidentiality marking on every page.
1. Executive Summary
-
Purpose: what you were asked to decide.
-
Method: brief on interviews and materials reviewed.
-
Outcome: headline findings for each allegation (substantiated / not substantiated / unable to determine) and any systemic issues.
-
Next steps: high-level recommendations (without pre-empting disciplinary outcomes you’re not authorised to decide).
Tip: Write this last, when your reasoning is final.
2. Background and Scope
-
How the matter arose (complaint, incident, whistleblower, audit).
-
Terms of reference and any changes made along the way (with reasons).
-
Roles: investigator, decision-maker, support persons, legal advisors.
3. Methodology
-
Investigation approach (document review, interviews, site visits).
-
Procedural fairness steps taken (notice of allegations, disclosure of material relied upon, right to respond, consideration of responses).
-
Limitations: unavailable witnesses, missing records, disputed accounts, or issues outside the investigator’s expertise.
4. Applicable Standards
-
Relevant policies (Code of Conduct, Anti-bullying, Equal Opportunity, WHS).
-
Any key legislative frameworks engaged (e.g., Fair Work, work health and safety, anti-discrimination).
-
Explain the balance of probabilities and how credibility is assessed.
5. Evidence Summary
Organise the evidence by source type or allegation, depending on the complexity of the matter. Use consistent evidence references so readers can trace each finding to the relevant material.
-
Documents & Digital Records: emails, rosters, CCTV extracts, system logs.
-
Witness Interviews: list each witness with a neutral descriptor and a short, objective synopsis.
-
Physical Evidence (if applicable): photos, items, locations.
Include an evidence table with: ID, description, date, source, relevance, and whether provided to parties.
6. Allegation-by-Allegation Analysis
For each allegation:
-
The allegation (verbatim, with date/timeframe).
-
Undisputed facts (if any).
-
Disputed facts & credibility assessment
-
Consider corroboration, contemporaneous records, inconsistencies and the opportunity to observe events. Explore alternative explanations and avoid assumptions based on demeanour or stereotypes.
-
-
Findings
-
Apply the balance of probabilities to the evidence.
-
Use the finding categories agreed in the terms of reference and define them. Explain precisely which conduct is established and which is not; a finding that is not substantiated does not itself mean the complaint was false.
-
-
Reasons
-
Link evidence to findings with plain-language logic (“because X, supported by Y and Z, outweighs A”).
-
Example of a reasoned finding
Illustrative example only—not a client matter.
Allegation: The respondent sent a colleague an email on 14 May calling them “incompetent”.
Evidence and response: Email E-04 contains those words and identifies the respondent’s account as the sender. In interview I-02, the respondent acknowledged sending it but said it expressed frustration about missed deadlines.
Finding and reasons: On the balance of probabilities, the alleged conduct is established. The email and the respondent’s acknowledgement support that finding. The explanation provides context but does not dispute that the words were sent. Whether the conduct breaches a particular policy requires separate analysis against that policy and the agreed scope.
7. Systemic or Cultural Issues (if within scope)
Note patterns uncovered (e.g., roster pressure, unclear policy, poor supervision). Keep recommendations practical and proportionate.
8. Conclusions and Recommendations
-
Concise conclusions across allegations.
-
Recommendations within your remit (e.g., policy refresh, training, mediation referral, risk controls).
-
Avoid recommending specific disciplinary sanctions unless the terms of reference direct you to.
9. Appendices
-
A: Terms of Reference
-
B: Chronology
-
C: Evidence register
-
D: Interview schedules & standard cautions used
-
E: Policies referenced
-
F: Glossary
Writing clearly and objectively
-
Neutral tone: describe, don’t dramatise. Avoid adjectives that imply bias.
-
Plain English: short sentences, active voice where possible, define jargon.
-
Show your reasoning: weigh competing evidence transparently.
-
Separate facts, analysis, and opinion: label each clearly.
-
Quote precisely when words matter; otherwise summarise faithfully.
-
Use consistent naming: “Complainant”, “Respondent”, “Witness A”.
-
Protect privacy: minimum necessary personal information; de-identify where appropriate.
-
Version control & audit trail: keep a secure record of drafts and approvals.
-
Accessibility: use informative headings, tables, and summaries for busy decision-makers.
Credibility assessment—do’s and don’ts
Do consider:
-
Consistency within a person’s account and across accounts.
-
Corroboration by documents or independent witnesses.
-
Plausibility against common experience and workplace context.
-
Contemporaneous records (emails, incident forms, system logs).
-
Opportunity and capacity to observe events.
Don’t rely solely on:
-
Demeanour or confidence in the interview.
-
Character evidence unrelated to the facts.
-
Irrelevant personal attributes or stereotypes.
Common pitfalls (and how to avoid them)
-
Blurry scope → Start with a written ToR; log any scope changes.
-
Leaping to conclusions → Use an allegation-by-allegation matrix; test alternative explanations.
-
Inadequate particulars → Put clear particulars to the Respondent and invite a response.
-
Missing disclosure → Give the respondent sufficient detail of relevant adverse material to respond meaningfully; obtain advice where confidentiality or safety concerns complicate disclosure.
-
Over- or under-reach → Give recommendations within your authority.
-
Confidentiality overreach → Set proportionate expectations; don’t gag lawful disclosures.
-
Poor record-keeping → Maintain an evidence register and secure file structure.
-
Vague findings → State the finding and the “because”.
Sample outline you can reuse internally
-
Title page (confidentiality banner)
-
Executive Summary
-
Background & Scope
-
Methodology & Procedural Fairness
-
Applicable Standards
-
Evidence Summary
-
Allegation 1 – Analysis, Finding, Reasons
-
Allegation 2 – Analysis, Finding, Reasons
-
…
-
Systemic Issues
-
Conclusions & Recommendations
-
Appendices (ToR, Chronology, Evidence Register, Interview Materials, Policies)
Final investigation report checklist
- Every allegation is addressed within the agreed scope.
- Evidence references match the register and appendices.
- The respondent’s account and relevant alternative explanations are considered.
- The report records the opportunity to respond to relevant adverse information.
- Each finding explains the reasoning, rather than simply listing evidence.
- Missing evidence and other limitations are acknowledged.
- Recommendations stay within the investigator’s remit.
- Names, dates, quotations, version details and intended recipients have been checked.
If the reasoning does not support a finding, revisit the evidence or further enquiries before polishing the wording.
Frequently asked questions
How long should a workplace investigation report be?
As long as necessary, as short as possible. Length is driven by the number and complexity of allegations. The aim is to present all relevant information in as concise a manner as possible while allowing the reader to gain a fulsome picture of the matter and the findings.
Can we include recommendations about disciplinary outcomes?
Only if your terms of reference authorise that role. Keep any recommendations within the agreed scope; disciplinary decisions ordinarily remain with the employer and its advisers.
What standard of proof applies?
Workplace investigations generally use the balance of probabilities: whether the alleged conduct is more likely than not to have occurred. Confirm the applicable framework and explain how the evidence supports each finding.
Should parties see the whole report?
Do not assume that everyone receives the full report, or that it can always be withheld. Disclosure depends on procedural fairness, applicable policies, agreements and legal obligations. Confirm the appropriate recipients and obtain advice where necessary.
What if evidence conflicts?
Acknowledge the conflict, explain your credibility assessment, and show why one version is more probable with reference to corroboration and plausibility.
SUPPORT FOR HR AND INTERNAL INVESTIGATORS
Need a second pair of eyes on your report?
Synergy provides independent investigations, peer review of draft reports and investigation training. Our internal investigation support can help you examine scope, evidence, procedural fairness and reporting before the next decision is made.
Discuss a report review Explore investigation support →
Speak with us about the matter and agree a scope before sharing sensitive report material.
Experience behind our services
Our team includes Corey Courtemanche, whose experience spans complex workplace investigations, investigator training, allegation drafting, report writing and quality assurance. Meet the Synergy team to explore the experience available for your matter.
Further guidance
The Australian Public Service Commission’s investigation and determination guidance explains evidence assessment and the importance of linking evidence to conclusions in the APS context. Its specific procedural requirements apply to that framework.
Related Synergy guidance: investigation confidentiality and procedural fairness.


Pingback: Workplace Investigations & Psychosocial Risk: HR Guide 2026