CRISISTABLETOP
Corporate team meeting in a modern boardroom
← Exercise library

CRISIS TABLETOP ORIGINAL · GOVERNANCE & CONDUCT

Executive Misconduct & Whistleblower

A whistleblower alleges that a senior commercial executive manipulated contract timing and retaliated against employees who objected. Conflicts emerge, evidence may be disappearing, the complainant contacts regulators, and leaked allegations force decisions before the investigation is complete.

2.5 HRSuggested duration10Participant roles11Scenario stages
Stock photography via Unsplash

EXERCISE PURPOSE

Test privileged intake, investigation independence, preservation, anti-retaliation controls, interim employment decisions, board oversight, disclosure, remediation, and communications.

A senior-executive misconduct allegation develops into retaliation concerns, financial-reporting risk, regulator contact, and public scrutiny

DECISION PRESSURE

Questions the team must answer together

The facilitator releases facts in stages. Participants should identify the decision owner, the authority being used, the information still needed, the immediate action, and the next escalation point.

01

Who receives the allegation if the general counsel or senior executives may have conflicts?

02

What preservation steps can occur without exposing the reporter?

03

Which interim measures protect people and evidence without prejudging facts?

04

When must audit committee, board, auditors, insurers, or regulators be informed?

05

How should the company respond when incomplete allegations become public?

INSIDE THE EXERCISE

A scenario that changes as the response develops

The template is already populated with public injects, facilitator-only context, discussion prompts, private role messages, and a final hotwash.

  1. Monday · 07:45
    Module 1 · Intake and investigation

    Confidential allegation received

    The ethics hotline receives a detailed report alleging that the Chief Commercial Officer pressured staff to backdate acceptance records so revenue could be recognized before quarter close. The reporter also alleges retaliation against an employee who objected.

  2. Monday · 09:00
    Module 1 · Intake and investigation

    Potential conflicts emerge

    The General Counsel previously advised the commercial team on the contract structure now at issue. The Chief Human Resources Officer approved a performance warning for the employee alleged to have suffered retaliation.

  3. Monday · 10:30
    Module 1 · Intake and investigation

    Evidence preservation is incomplete

    IT confirms that chat messages are retained for only 30 days and that the executive uses a personal phone for some business communications. A key salesperson resigned last week and their cloud account is scheduled for deletion tonight.

  4. Monday · 13:00
    Module 1 · Intake and investigation

    Retaliation concern intensifies

    The suspected reporter is removed from a customer meeting, receives a negative interim review, and is told that advancement opportunities are on hold while leadership evaluates loyalty and fit.

  5. Tuesday · 08:30
    Module 1 · Intake and investigation

    Scope expands beyond one contract

    A preliminary data review identifies similar quarter-end changes in six transactions over eighteen months. Internal Audit had previously noted approval-control exceptions but closed them after management promised training.

  6. Tuesday · 11:00
    Module 2 · External pressure and resolution

    Executive demands the reporter’s identity

    The accused executive denies wrongdoing, demands to know who made the allegations, and asks the CEO to terminate the suspected reporter for disloyalty and poor performance.

  7. Wednesday · 09:15
    Module 2 · External pressure and resolution

    Regulator contact disclosed

    The whistleblower tells the hotline vendor that documents were provided to the SEC and that counsel may contact the media if the company retaliates or delays corrective action.

PARTICIPANTS

Bring the decision-makers who would own the real event

Assign people to functions, not titles alone. If one person owns several functions, keep the roles distinct during discussion so conflicts and handoffs remain visible.

General CounselInvestigation CounselChief Human Resources OfficerChief Compliance OfficerAudit Committee ChairFinance and Internal Audit LeadIT and eDiscovery LeadCommunications LeadBusiness Unit LeaderExecutive Sponsor

REAL-WORLD INCIDENTS

Ground the exercise in events teams can recognize

Use these cases during planning or the prebrief. They are factual anchors, not scripts. Adapt the scenario to the organization’s technology, industry, geography, contracts, regulators, and risk profile.

LEGAL, REGULATORY & STANDARDS LENS

Authorities worth testing against the scenario

Applicability depends on the organization and facts. Use counsel and subject-matter owners to tailor deadlines, thresholds, privileges, preservation, reporting, and communications.

PRACTITIONER PERSPECTIVES

Law-firm and security-professional guidance

External perspectives help the design team challenge internal assumptions. They do not replace organization-specific legal or technical advice.

EXPECTED OUTPUT

Finish with an improvement plan, not a score.

  • A conflict-aware intake and escalation path
  • Clear investigation authority and reporting lines
  • Tested anti-retaliation controls
  • Coordinated disclosure and communications governance
  • Remediation tied to controls, incentives, and culture
Start with this exerciseRead the facilitator guide