Let’s say you’re a publicly traded manufacturer of a popular medical device, which you sell commercially as well as to a number of VA hospitals. You receive an anonymous internal hotline complaint alleging that certain unauthorized, reverse-engineered components were used in the manufacturing process and that certain quality tests were skipped in the interest of “efficiency.” You triage the complaint, do your preliminary diligence, determine the complaint isn’t frivolous, and launch a privileged internal investigation.