Getting the most out of internal investigations