Sceáwian Field Manual / Australian Practice / 2026 Edition
Australian Workplace Investigation Field Guide
A detailed operational manual for commissioning, conducting and reviewing lawful, fair and defensible workplace investigations.
Purpose
An investigation must show its working.
A conclusion is only as defensible as the process that produced it. A serious workplace investigation needs a settled mandate, properly framed allegations, controlled evidence, fair interviews, disciplined analysis and reasons that connect each finding to the material relied upon.
This manual is for Australian boards, executives, people and culture teams, legal advisers, integrity officers and managers who commission or oversee workplace investigations. It explains how to implement the process in practice, with worked examples and tools. It is general information, not legal advice.
01 / Decision gateway
Decide what process the matter actually requires.
Formal investigation is one response, not the automatic response. The commissioning officer should record why it is necessary and proportionate.
Investigate formally when
- material facts are disputed
- a finding may lead to disciplinary action
- senior people or multiple complainants are involved
- fraud, sexual harassment, reprisal or serious misconduct is alleged
- the organisation needs an independently reasoned factual record
Consider another pathway when
- the facts are substantially agreed and the issue is remedial
- a safety intervention cannot wait for fact-finding
- facilitated resolution is appropriate and genuinely voluntary
- the matter belongs with police, a regulator or another statutory process
- performance management, not misconduct investigation, is the real issue
Immediate controls
- assess safety and psychosocial risk
- preserve volatile records
- prevent victimisation or reprisal
- check mandatory notification duties
- consider neutral interim reporting lines, leave or contact controls
Worked scenario
A complaint arrives at 4:40 pm on Friday
A procurement analyst alleges that a manager altered evaluation records and then threatened the analyst after concerns were raised. Do not begin witness interviews immediately. First preserve the procurement system audit trail, emails, chat records and access logs; identify whether tender decisions remain active; assess reprisal risk; separate the manager from control of records; obtain legal advice about reporting duties; and appoint a conflict-free commissioning officer. The investigation scope can be settled once those controls are in place.
02 / Commissioning
Write the mandate before collecting the answer.
The terms of reference are the control document. They prevent scope drift, role confusion and retrospective changes to the question.
Minimum commission
- Purpose: the decision the investigation will inform.
- Allegations: each issue to be determined, separately numbered.
- Authority: who may obtain records, contact witnesses and vary scope.
- Roles: investigator, commissioning officer, legal adviser and ultimate decision-maker.
- Framework: relevant policy, contract, enterprise agreement, legislation and finding terminology.
- Deliverables: report, chronology, evidence schedule, allegation matrix and briefing.
- Boundaries: exclusions, privilege arrangements, referral triggers and deadline.
Independence test
Ask whether a reasonable participant could regard the investigator or decision-maker as committed to an outcome. Record prior involvement, reporting relationships, personal connections, previous advice and exposure to disputed material.
Variation protocol
New allegations do not silently enter the report. Record the proposed variation, relevance, impact on timing, evidence still required and who authorised inclusion. Notify affected people and provide a further opportunity to respond.
03 / Allegation design
Turn narrative into propositions that can be answered.
Vague allegations impair fairness and produce vague findings. Each allegation should identify conduct, context and the obligation said to be engaged.
Weak
“You bullied Jordan and created a toxic workplace.”
This states a conclusion, gives no date or conduct, and does not tell the respondent what case must be answered.
Workable
“On 14 March 2026, during the weekly operations meeting in Meeting Room 4, you allegedly said to Jordan Lee, ‘If you cannot handle this account, you should not be here’, raised your voice and struck the table. It is alleged this conduct was unreasonable and contrary to clauses 4.2 and 6.1 of the Respectful Workplace Policy.”
This identifies time, place, words, acts and the rule engaged without assuming the outcome.
Allegation matrix
| ID | Proposition to determine | Supporting material | Contrary material | Response required | Finding |
|---|---|---|---|---|---|
| A1 | Words used and table struck | Two witnesses; meeting note | Respondent denies striking table | Location, wording, physical action | Pending |
| A2 | Conduct engaged policy threshold | Policy; frequency/context evidence | Operational urgency; single event | Purpose and surrounding context | Pending |
Do not combine factual occurrence and policy characterisation without analysing both. The words may have been spoken, yet the policy threshold may still require separate reasoning.
04 / Evidence preservation
Preserve the original context, not merely a screenshot of it.
Evidence control begins when a formal process is reasonably contemplated. The aim is continuity: a later reviewer should be able to identify what was obtained, from where, by whom and whether it changed.
People evidence
Complaints, witness accounts, interview recordings, signed statements, contemporaneous notes and explanations of perception or memory.
Documentary evidence
Policies, contracts, rosters, minutes, emails, chat exports, procurement records, HR records, access logs and system reports.
Physical and visual evidence
CCTV, photographs, site plans, damage records, device information and documented scene observations.
Evidence lifecycle
- Identify likely repositories and custodians.
- Issue proportionate preservation directions.
- Collect native files where reasonably available.
- Record source, date, method and collector.
- Store controlled originals with restricted access.
- Create working copies and record transformations.
- Maintain an evidence register and chronology.
- Apply an authorised retention or disposal decision.
Digital example: a Teams message
A cropped screenshot may omit the channel, timestamp, surrounding conversation, edits, reactions and message identity. Prefer a native or administrator export where available. If a screenshot is all that exists, record who captured it, on what device, when, what is outside the crop and whether the source conversation was viewed.
05 / Investigation plan
Map the issues, sources and sequence before interviewing.
A plan is a living control, not a prediction. It records why each line of enquiry is relevant and why other lines were not pursued.
Example sequence
For an allegation of expense fraud and retaliation: preserve expense-system audit data and messaging records; interview the reporter to particularise events; obtain the financial-control owner’s explanation of process; test transactions against source documents; interview direct witnesses; then put the particularised allegation and material inconsistencies to the respondent. Re-interview only where a new material issue cannot fairly be resolved from existing evidence.
06 / Interviews
Interview for evidence, not confirmation.
The aim is an accurate account and a fair opportunity to explain, including explanations that weaken the allegation.
Opening protocol
- identify roles and purpose
- explain participation requirements and support-person arrangements
- state confidentiality expectations and their limits
- explain recording, note confirmation and information use
- identify welfare breaks and accessibility needs
- ask the participant to distinguish personal knowledge from information received from others
Question funnel
- Open: “Tell me what happened from the beginning.”
- Clarify: “What did you personally see or hear?”
- Locate: “Where were you in relation to the doorway?”
- Test: “Your email at 3:18 pm describes the meeting as calm. Help me understand the difference.”
- Complete: “What have I not asked that could materially change my understanding?”
Leading versus neutral
Avoid: “He was shouting aggressively, wasn’t he?”
Use: “Describe his volume, words, tone and physical actions. What makes you characterise it that way?”
Avoid: “Why did you approve the false invoice?”
Use: “Take me through how the invoice was checked and approved. What information did you rely on?”
Testing memory
Ask what refreshed the witness’s memory, whether they discussed the event with others, what notes were made at the time, lighting or distance, workload, language, stress and whether any part of the account is reconstruction rather than recollection. Do not equate confidence with accuracy.
07 / Procedural fairness
Give a real opportunity to change the outcome.
Fairness is not satisfied by inviting a response after the decision is effectively settled. The response must be received and genuinely considered before adverse findings or disciplinary decisions are finalised.
Notice
Put the substance of each adverse allegation in plain language with enough particulars for a meaningful answer.
Opportunity
Allow reasonable time, an appropriate format, a support person where applicable and accessibility or language adjustments.
Open mind
Consider the response, pursue material new leads, correct errors and separate investigation findings from consequence.
Disclosure is contextual
Fairness does not invariably require every document or witness identity. It does require the substance of adverse material that may be relied upon. Restrictions based on safety, privacy, whistleblower protection or legal privilege should be narrowly framed, authorised and recorded. Where identity is withheld, test whether dates, locations, words, surrounding circumstances and source reliability can still be disclosed sufficiently for a meaningful response.
Practical fairness check
Before closing the evidence phase, ask: If this finding were adverse to me, would I know the factual case, the material evidence and the policy threshold? Did I have enough time and a usable process to answer? Has the investigator dealt with my material explanation rather than merely recording that I disagreed?
08 / Analysis
Build findings from propositions, not impressions.
Analyse each allegation separately. Distinguish agreed fact, disputed fact, hearsay, inference, credibility assessment and policy characterisation.
Reliability factors
- opportunity to observe
- contemporaneous record or prompt
- internal consistency
- corroboration by independent material
- plausible explanation for discrepancy
- motive or interest, assessed cautiously
- consistency with objective chronology
- whether detail could be independently verified
Demeanour is a weak stand-alone measure. Culture, disability, trauma, language, stress and interview setting can affect presentation.
Competing hypotheses
Do not ask only, “Does the complaint appear credible?” Ask what else could explain the same material.
The manager deliberately altered the score.
H2
The system recalculated after a permitted criteria change.
H3
Another user changed the record using shared access.
H4
The displayed report differs from the audit history.
Identify what evidence would distinguish each explanation, then actively look for disconfirming material.
Standard of proof
Workplace findings commonly use the balance of probabilities: whether the alleged fact is more likely than not. Briginshaw v Briginshaw does not create a third standard. It reminds decision-makers that reasonable satisfaction should reflect the seriousness and inherent likelihood of what is alleged. Grave findings should not rest on weak, ambiguous or mechanically counted material.
09 / Findings
Show the evidence pathway.
A finding should be concise enough to understand and detailed enough to audit.
Worked finding structure
Allegation A1: words and physical action at the meeting
Finding: Substantiated in part.
Agreed: The respondent addressed Jordan during the 14 March meeting and said that Jordan might not be suited to the account.
Disputed: Whether the respondent used the quoted words, raised their voice and struck the table.
Assessment: Two witnesses independently recalled a raised voice. One contemporaneous message described the respondent as “very loud”. The room recording contains an audible impact but does not identify its source. The witnesses differed about whether a hand or folder contacted the table. The respondent accepted placing a folder down firmly.
Conclusion: It is more likely than not that the respondent raised their voice and placed a folder on the table with sufficient force to create the impact. The evidence is insufficient to find that the respondent struck the table with their hand. The exact quoted words are not established, but the substance is.
Policy characterisation: Assessed separately against context, repetition and the policy definition.
10 / Reporting
Write for a reader who was not in the room.
The report should permit the commissioning officer, decision-maker or later reviewer to understand the mandate, process, evidence and reasoning without reconstructing the file.
Recommended structure
- Executive summary
- Commission and scope
- Investigator, independence and conflicts
- Applicable framework and standard
- Methodology and evidence controls
- Limitations and scope variations
- Each allegation, evidence, response and finding
- Systemic observations, only if authorised
- Evidence schedule, chronology and appendices
Quality-control questions
- Does every finding answer a commissioned allegation?
- Is contrary evidence dealt with, not hidden?
- Are fact, submission and inference distinguishable?
- Are credibility reasons evidence-based?
- Were all material adverse matters put?
- Does the report reveal unnecessary sensitive information?
- Are recommendations within scope?
- Can every referenced item be located in the evidence register?
11 / Australian case lessons
Historic decisions show where process fails.
These are practical lessons, not substitutes for reading the full decision or obtaining legal advice.
Briginshaw v Briginshaw
Serious allegations still use the civil standard, but reasonable satisfaction must reflect the gravity and inherent likelihood of the allegation. Operational lesson: do not treat “more likely than not” as a mechanical 51 per cent calculation.
Wadey v YMCA Canberra
An opportunity to defend must be capable of affecting the result; going through the motions after deciding to dismiss is not a genuine opportunity. Operational lesson: document consideration of the response before the decision.
Dimovski v Howe & Co
The process failed to accommodate limited English and relied on second-hand allegations without allowing the employee to address accusers’ comments. Operational lesson: plan language and accessibility support as part of fairness.
Melouney v ACM Group
Fairness did not necessarily require the employee to receive witness statements or source identities where the substance of the allegations was known and answered. Operational lesson: disclosure is contextual, but the case to meet must remain intelligible.
Jimenez v Accent Group
The Commission considered procedural fairness while testing whether the employer’s serious-misconduct findings could actually be sustained. Operational lesson: a polished process cannot repair findings that outrun the evidence.
Suzara v St Vincent’s
Some reasons relied upon were not put before dismissal, creating procedural defects, although the dismissal was ultimately not found unfair in the whole circumstances. Operational lesson: late reasons expose the decision; put every material reason before final action.
12 / Organisational implementation
Build readiness before the complaint arrives.
A credible investigation capability depends on governance, records and trained decision-makers, not a template downloaded during a crisis.
First 30 days
- nominate commissioning roles
- map escalation and mandatory-reporting pathways
- create conflict and preservation protocols
- approve allegation, interview and evidence templates
- identify secure matter storage
By 60 days
- train HR, integrity and legal stakeholders
- test access to email, chat and audit-log exports
- establish external investigator panels
- define welfare and reprisal controls
- set report and decision quality reviews
By 90 days
- run a tabletop scenario
- audit a closed matter against this manual
- review retention and privacy settings
- measure delay, rework and participant communication
- brief the board or risk committee on capability gaps
Seven implementation tools in the PDF
Sources and limitations
Primary Australian reference points
Fair Work Commission guidance on opportunity to respond, procedural fairness, evidence and internal investigations; Fair Work Ombudsman guidance on workplace investigations; Australian Human Rights Commission good-practice guidance for internal complaint processes; and the decisions identified above. Source links and fuller citations appear in the PDF edition.
This manual is general information current to 12 August 2026. Workplace investigations may engage employment, discrimination, work health and safety, privacy, surveillance, corporations, public-sector, whistleblower, criminal and professional-obligation regimes. Obtain advice for the matter and jurisdiction.
2026 designed edition
Take the operational manual with you.
The expanded PDF includes the full methodology, worked examples, Australian case lessons and seven implementation tools.