Intake Protocol Slides The First Response
Complaint Intake & Immediate Measures
Module 01: Investigation Masterclass
The Critical Window
Immediacy
The first 24-48 hours define the organization's legal and ethical stance.
Interim Measures
Safety, non-retaliation, and preservation of evidence must be prioritized.
Duty to Investigate
The obligation starts as soon as a supervisor "knows or should have known."
"The goal of intake is not to find the truth, but to capture the complaint in its rawest form while establishing a neutral, professional environment."
Intake Objectives
Identification
Who is the Complainant? Who is the Respondent? Who are the Witnesses?
The Narrative
What happened? When? Where? What was the context or frequency?
Interim Needs
Does the Complainant feel safe? Is an immediate separation required?
Neutrality is your Armor
Interim Measures Decision Matrix
Action Pros Cons/Risks Administrative Leave (Paid) Ensures safety; prevents evidence tampering; cools tempers. Can appear punitive; potentially alerts Respondent prematurely. Departmental Transfer Keeps both working; removes direct contact. Disruptive; may be seen as retaliation if Complainant is moved. No-Contact Order Low cost; formal boundary setting. Difficult to enforce in small offices; high risk of violation.
Rule of Thumb: Avoid moving the Complainant unless they specifically request it. Moving them can be viewed as an adverse employment action (Retaliation).
Live Simulation
The phone is ringing. It is 4:45 PM on a Friday. An employee is reporting an incident that occurred an hour ago.
Your goal: Perform an initial intake while de-escalating the crisis.
Simulation Facilitator Guide Facilitator Guide: The Red Phone
Module 01 Simulation | Instructor Version
STRICTLY CONFIDENTIAL
Simulation Overview
This simulation is designed to test student reflexes under pressure. The "Hook" is a live phone call that interrupts the lecture. The instructor (or a TA/Volunteer) plays Elena Vance , a terrified employee reporting a physical assault/harassment incident by her supervisor.
Duration
8-10 minute call + 15 min debrief
Key Learning
Crisis de-escalation & neutral documentation
Role Persona: Elena Vance
Emotional State
Frantic, breathing heavily, crying intermittently. She is hiding in a bathroom stall. She is afraid the supervisor is looking for her.
The Facts
Who: Marcus Thorne (VP of Operations)What: Cornered her in the breakroom, grabbed her arm, made a suggestive comment about her "debt" to him for her recent promotion.Witnesses: Likely nobody, but the breakroom door was open.
The Ask
"I can't go back out there. Do I have a job? Is he going to fire me for calling you? I need to go home right now."
Step-by-Step Facilitation
1
The Trigger:
While teaching Slide 5, have your phone (or a student's) ring on loud speaker. Answer it and hand it to a student, or have the student answer directly if pre-arranged.
2
The Pressure Test:
If the student asks "Can you tell me more?", Elena should say "I don't know, it's just bad. He touched me. I'm scared." Force the student to ask for specifics without being insensitive.
3
The Termination Trap:
Elena asks: "Am I safe? Should I call the police?" The student must handle the legal/safety boundary correctly (Always support calling police for assault, but don't promise outcomes of the investigation).
Debriefing Questions
"Did the student make any promises they couldn't keep (e.g., 'Everything will be fine')?"
"How did the student handle the 'interim measure' of her wanting to leave immediately?"
"Were the notes taken during the call sufficient to start an Investigation Roadmap?"
Intake Interview Log Intake Interview Log
Form ID: INV-INT-001 | Investigation Masterclass
Date:
Interviewer:
I. Complainant Information
Full Name
Department / Role
Direct Supervisor
Contact Method (Preferred)
II. Incident Allegations
Nature of Complaint (Check all that apply)
Sexual Harassment
Discrimination
Retaliation
Physical Assault
The Narrative (Detailed Chronology)
Witnesses Identified
Physical/Digital Evidence Mentioned
III. Immediate Needs & Safety Assessment
Does the complainant feel safe remaining at work?
Yes
No
Interim Measures Discussed/Implemented
Confidentiality & Non-Retaliation Notice
By signing below, the interviewer confirms that the complainant was informed of the organization's non-retaliation policy and that confidentiality will be maintained to the greatest extent possible during the investigation. The complainant understands that absolute confidentiality cannot be guaranteed if legal obligations require disclosure.
Complainant Signature (Optional)
Investigator Signature
Evidence Strategy Slides Mapping the Case
Evidence Strategy & Planning
Module 02: Investigation Masterclass
The Investigation Roadmap
"A plan is your defense against accusations of bias or incompetence."
Define the Scope
Identify Policies Violated
Order of Interviews
Evidence Preservation List
Standard Interview Order
1 Complainant: Deep dive on facts.
2 Witnesses: Corroborate or refute.
3 Respondent: Full right to reply.
Digital & Physical Evidence
Communications
Emails, Slack logs, Teams chats, SMS.
Note: Personal phones require consent or legal subpoena.
Surveillance
Badge swipes, CCTV footage, GPS logs.
Warning: CCTV often overwrites every 7-30 days. Secure early!
Personnel Records
Performance reviews, prior disciplinary actions.
Establishes patterns and potential motives.
The "Smoking Gun" Analysis
Evidence rarely yells; it usually whispers. Look for inconsistencies, sudden changes in tone, or "gap periods" where communications stopped.
Activity Hook:
Examine the provided "Email & Slack Dump." Identify three red flags that warrant immediate investigative focus.
Evidence Case File Evidence File #2026-08A
Internal Affairs / HR Department Use Only
Classified
Teacher Note: The "Smoking Gun" Hook
Provide this document to students. Their task is to identify the inconsistency between the public Slack channel and the private email trail. The "smoking gun" is the timestamp gap in the Slack channel followed by the specific threatening language in the email sent from a personal account.
Exhibit A: Slack Channel #operations-ops
Marcus Thorne 10:45 AM
@ElenaV can you get those operational audits to me by EOD? We need them for the board meeting.
Elena Vance 10:47 AM
I'm working on them now, Marcus. It's a lot of data, but I'll try.
Marcus Thorne 10:50 AM
Try harder. Don't let me down again.
--- [Channel Inactivity: 10:50 AM to 1:15 PM] ---
Elena Vance 1:16 PM
Marcus, per our conversation in the breakroom just now, I will be working from home for the rest of the day. I am feeling unwell.
Exhibit B: Email Recovered via Complainant (Forwarded)
From: mthorne_ops_solutions@proton.me (Personal Address)
To: evance@gmail.com
Sent: 1:05 PM (11 minutes before Elena's Slack message)
Subject: Your future here
Elena,
I noticed you didn't seem to appreciate our "talk" in the breakroom. Let me make this very clear: that promotion wasn't just based on your performance. You owe me your loyalty, and you owe me your silence about how we handle the ops audits. If you mention our conversation to HR, you'll find that your "career" is over before it starts.
Go home. Clear your head. Decide who you want to be.
M.
The Challenge
Analyze Exhibits A and B. Answer the following for the Investigation Plan:
Identify the Time Inconsistency : What happened between 1:05 PM and 1:16 PM?
Identify the Legal Red Flag : Which organizational policy does Exhibit B clearly violate?
Identify the Next Step : Who is the first person you need to interview after seeing this?
Investigation Roadmap Template Investigation Roadmap
Strategic Planning Template
Case Status: In-Planning
REF: HR-INV-2026-08
I. Scope of Investigation
Central Allegation(s)
What specific behavior or policy violation are we investigating?
Applicable Policies
List relevant Handbook sections (e.g., Code of Conduct, Anti-Harassment, IT Usage).
II. Interview Strategy
Subject Name Role (C/R/W) Key Information Needed
C = Complainant | R = Respondent | W = Witness
III. Evidence Preservation Checklist
Corporate Email Archival (Legal Hold)
Slack/Messaging History Preservation
CCTV / Security Footage Retrieval
Badge Swipe / Access Logs
Company Device Forensic Imaging
Personal Device Evidence Request
IV. Administrative Timeline
Anticipated End Date
Confidentiality Protections (Steps taken to protect ID)
The Art of Inquiry Slides The Art of Inquiry
Interviewing the Accused & Witnesses
Module 03: Investigation Masterclass
Interviewing the Accused (Respondent)
The Goal: Due Process
Ensuring the respondent has a full and fair opportunity to respond to every single allegation.
Avoid "Ambush" interviews.
Present evidence neutrally.
Address denials with "Can you help me understand why...?"
Common Respondent Tactics
"This is a witch hunt because of my performance reviews."
"I'm going to sue the company for defamation."
"I don't recall that specific conversation."
"Everyone jokes like that in this department."
The Funnel Technique
Open-Ended (The Wide Mouth)
"Describe your working relationship with Elena."
Probing (The Mid-Section)
"When you were in the breakroom yesterday, what was the mood?"
Closed/Confirming (The Spout)
"So, you admit that you were alone in the room with her at 1:00 PM?"
Handling De-escalation
Stay Neutral
Your voice should remain steady. Don't mirror their anger. Use silence as a tool. People fill silence with information.
Stick to Process
"I understand you are frustrated, but my role is to gather facts so the organization can make a fair decision based on policy."
Simulation Hook: The Defensive Actor
"You are about to enter a room with Marcus Thorne. He has his lawyer on speed dial and is ready to walk out. Keep him talking."
Interview Role Play Scripts Role Play: The Confrontation
Module 03 Simulation | Instructor Confidential
INSTRUCTOR ONLY
Persona A: Marcus Thorne (The Accused)
Tone: Aggressive, defensive, condescending.
The Stance
Marcus is a high-performer. He believes Elena is "playing the victim" to cover up her inability to handle the Operations Audits. He thinks HR is wasting his time.
The "Truth" (His Version)
He was in the breakroom. He was frustrated about the audits. He might have touched her arm to "get her attention" because she was walking away, but it wasn't sexual. It was "motivational."
Trigger Phrases (Use these if the student stumbles)
"Do you know how much revenue I brought in last quarter?"
"This is HR busy-work. I have a company to run."
"I don't recall sending that email. Maybe I was hacked?"
"She's been cold to me lately. Maybe she's the one with the problem."
Persona B: David Chen (The Reluctant Witness)
Tone: Nervous, vague, wants to leave.
The Stance
David was passing the breakroom. He saw Marcus and Elena. He likes Elena, but he works for Marcus. He is terrified of losing his job if he speaks up.
The "Truth" (What he saw)
He saw Marcus block the doorway. He heard Marcus say something about "indebtedness." He saw Elena look visibly shaken, but he didn't see Marcus grab her.
Testing the Investigator
"I'm not really sure what I saw. It was dark."
"Can you promise me Marcus won't find out I talked to you?"
"Is Elena getting fired? I heard a rumor."
"I don't want to get involved. Can I just go back to my desk?"
Simulation Management
Round 1: Half the class interviews Marcus; half interviews David. Focus on "Funneling."
Round 2: Switch roles. Students must manage the transition from a hostile respondent to a nervous witness.
Note: If a student makes a "promise of 100% confidentiality," the actor (David) should immediately call them out or rely on it, showing the student the danger of that promise later.
Questioning Framework Worksheet Questioning Framework
Interview Planning Tool | Module 03
Use this framework to plan your interview for either Marcus Thorne (Respondent) or David Chen (Witness). Focus on moving from broad context to specific allegations.
1
The Opening (Neutral Ground)
Draft your opening statement including the investigation's purpose and the non-retaliation notice.
2
Open-Ended Narrative Inquiry
Write 2 questions that allow the subject to tell their story without prompts.
Q1:
Q2:
3
Probing Specific Events
Based on the 'Breakroom Incident' (Exhibit A/B), draft questions to test for inconsistencies.
Evidence Confrontation
Handling Denials
4
The Closing
Final question to ensure no other information remains. (e.g., "Is there anyone else I should speak with?")
Instructor Feedback Notes
Neutrality Score
De-escalation Effectiveness
Evidence Usage
The Truth Seekers Slides Determining the Truth
Credibility Assessment & Findings
Module 04: Investigation Masterclass
The Burden of Proof
Preponderance of Evidence
"Is it more likely than not (51%) that the event occurred as alleged?"
Crucial Note:
You are NOT applying the "Beyond a Reasonable Doubt" standard used in criminal law. Workplace investigations use a lower threshold.
51% vs 49%
The Margin of Decision
Factors of Credibility
Plausibility
Does the story make sense given the circumstances? Is it consistent with human behavior?
Motive
Does anyone have a reason to lie? (Promotion, fear of firing, personal vendetta?)
Corroboration
Does other evidence (badge swipes, emails, witness testimony) back up the claim?
Demeanor
USE CAUTION: Nerves do not equal guilt. Focus on internal consistency of the story instead.
Formal Findings of Fact
Every investigation must conclude with one of three findings:
01
Substantiated
The preponderance of evidence shows the event happened.
02
Unsubstantiated
The evidence is insufficient to prove the event happened (Equilibrium).
03
Exonerated
The preponderance of evidence shows the event did NOT happen.
Credibility Rubric & Key Assessment Guide: Findings of Fact
Case Resolution #2026-08A | Instructor Key
RUBRIC & KEY
Credibility Weighing Matrix
Witness/Party Key Inconsistencies / Corroboration Credibility Score (1-5) Elena Vance (C) Consistent narrative. Corroborated by timing of Slack message (1:16 PM) and fear expressed in phone call. Motive is safety, not gain. 5 - High Marcus Thorne (R) Significant inconsistency between denial and personal email sent at 1:05 PM. Email explicitly threatens her career (Motive to silence). 1 - Low David Chen (W) Reluctant but confirms seeing Marcus block the doorway. Confirms Elena's physical distress. Corroborates presence and environment. 4 - Medium/High
Final Finding: SUBSTANTIATED
Students should conclude that the harassment and retaliation allegations are substantiated. The evidence "tip" occurs when Exhibit B (Personal Email) is introduced, proving Marcus's intent and direct contradiction of his verbal denials.
Pass Criteria
Identifies email as key corroboration.
Applies preponderance standard correctly.
Justifies why respondent credibility is low.
Common Pitfalls
Applying "reasonable doubt" (too high).
Ignoring the witness (David) because he "didn't see everything."
Failing to mention the timeline gap.
Grading Rubric: Fact-Finding Memo
Neutrality of Language (No emotional bias) /25
Synthesis of Evidence (Linking Slack to Email) /35
Credibility Analysis (Use of Plausibility/Motive) /30
Clarity of Final Finding /10
Fact Finding Ledger Fact Finding Ledger
Documenting Evidence Weights | Investigation Masterclass
Before writing your final report, you must weigh the evidence. Use this ledger to balance conflicting statements and determine the "preponderance of evidence" (51% threshold).
Evidence Balancer
The Allegation Evidence FOR Evidence AGAINST Incident in Breakroom (Physical/Verbal) Retaliatory Threat (Job Security)
Credibility Weighing
Marcus Thorne (Respondent)
Identify one motive for untruthfulness:
Degree of Plausibility (1-10):
Elena Vance (Complainant)
Identify corroborating evidence:
Degree of Plausibility (1-10):
Preliminary Determination
Substantiated
Unsubstantiated
Exonerated
Justification Memo (Briefly summarize why evidence tipped the scale)
The Final Word Slides The Final Word
Report Writing & Remediation
Module 05: Investigation Masterclass
The Defensible Report
Your report is likely to be read by:1. Executives, 2. Attorneys, and 3. Judges.
Technical Writing Principles:
"Objectivity over Adjectives" (He "yelled" vs. He "spoke loudly")
"Fact over Feeling"
"Direct Quotes over Summaries"
Structure of the Determination
A. Procedural History (Who/When)B. Allegations (Specifically defined)C. Summary of Evidence (Intake/Interviews)D. Findings of Fact (The Preponderance)E. Conclusion (Policy Violation?)
Remediation: Closing the Loop
Once a finding is Substantiated, you must recommend action that is "Reasonably Calculated to End the Harassment."
Discipline
Written warnings, suspension, or termination.
Training
1-on-1 coaching or department-wide sensitivity training.
Structure
Reporting line changes or departmental reorganization.
The Litigation Trap
"In 2019, an HR Director wrote:
The Result:
A $500,000 Defamation Lawsuit.Don't let your report become the evidence against you.
Case Closing Guide Final Assessment Rubric
Case Resolution Report | Module 05
100%
Students must compile all data from Lessons 1-4 into a formal, 3-5 page Investigation Report . The report should conclude with a determination and specific remediation recommendations for the Thorne/Vance case.
Criteria Excellent (Mastery) Points Procedural Integrity Accurately documents timelines, intake dates, interim measures taken, and interview sequences. Shows clear due process. 20 Evidence Synthesis Directly links interview testimony to Exhibit A (Slack) and Exhibit B (Email). Highlights the "smoking gun" inconsistency neutrally. 30 Finding of Fact Applies 'Preponderance' standard correctly. Substantiates the claim based on evidence, not emotion. Defines policy violations clearly. 30 Remediation Strategy Recommends actions that are proportional (e.g., termination vs. training) and legally defensible. Considers the safety of the complainant. 20
Critical Review Points (Look for these "Red Flags")
Language Bias
Does the student call Marcus "predatory" or "guilty"? (Should be: "The behavior violated Policy X"). Adjectives increase defamation risk.
Procedural Gaps
Did the student fail to mention the respondent's right to reply? Failure to document the respondent's defense is a major due process flaw.
Final Course Grade:
Investigation Report Template Investigation Report
Case #2026-08A | Final Determination
Status
Final
Investigator: ________________________
Date of Report: ________________________
Complainant: Elena Vance
Respondent: Marcus Thorne
I. Procedural History
Summarize the dates of intake, interim measures taken, and the list of interviews conducted.
II. Findings of Fact & Synthesis
Incident Corroboration (Witnesses & Digital Evidence)
Respondent Discrepancies (Addressing the 'Defenses')
III. Formal Determination
Substantiated
Unsubstantiated
Exonerated
Policy Violation Determination (Reference Handbook)
IV. Recommended Remediation & Disciplinary Action
Based on the finding, what actions are necessary to stop the behavior and prevent recurrence?
Investigator Signature
Chief Human Resources Officer Review
