When a regulator opens an investigation that is, or will become, public, the matter has a structural shape. The shape is sequential. The workstreams that an entity has to manage – the regulator engagement, the privilege architecture, the board notification, the continuous disclosure assessment, the market communication, the media positioning, the continuing operational management – are not parallel tracks that can be run independently. They are sequenced, and the dependencies between them are the strategy.
The most common failure mode we observe is not a failure of any single workstream. The legal team usually handles the regulator engagement competently. Communications functions usually handle media well in isolation. Boards usually take notification seriously. The failure is at the joinery. Decisions are made on one workstream that close down options on another. The market communication is settled before the privilege architecture is clear. The media position is taken before the regulator's view is understood. The board is notified after a public statement has been made. The order of operations was wrong, and once the order is wrong, the consequences cascade.
A few observations on the architecture.
The privilege question is the threshold. Whether the entity is communicating with the regulator under privilege, or in the regulator's voluntary cooperation framework, or under the formal compulsion of a notice – the privilege design that sits over the entity's internal record-making is the threshold question. Get it wrong, and material that the entity assumed was protected is producible. Material the entity assumed was producible has been overcommunicated. The privilege architecture has to be set before any other workstream begins. It is the foundation. Everything else is built on it.
The board notification follows. Material has to move to the board, in a form the board can engage with, on a cadence that respects both the speed of the matter and the board's deliberative function. The temptation in fast-moving matters is to keep the board briefed at a high level until decisions need to be made. The discipline is the inverse: keep the board briefed at the level of detail the matter requires as it requires it, and do not make irreversible decisions ahead of the board engagement they require. Board minutes become, again, the record. A board that has been briefed in real time and that has interrogated the management response in real time has a record that demonstrates oversight. A board that was briefed after the relevant decisions had been made does not.
The continuous disclosure assessment is contemporaneous with the early board engagement, not subsequent to it. The disclosure question is not whether to make a statement to the market. It is whether the matter is, on the facts as the entity knows them at any given point, market-sensitive within the meaning of the listing rules and s674A. That assessment is dynamic. It moves with the development of the matter. It has to be made by the disclosure committee with the right information at the right time, and it has to be recorded. The record of how the disclosure question was approached over the course of the matter is, in the contested case, decisive.
Market communication, when it is required, is downstream of the disclosure assessment but is not a substitute for it. A public statement made for reputational reasons, ahead of the disclosure analysis, exposes the entity on multiple axes. It commits the entity to a position before the position is robust. It can interfere with the regulator's work. It can prejudice the entity's privilege design. It can constrain the board's options. The discipline – and it is a discipline that is hard to hold under media pressure – is that the disclosure analysis governs the communication, not the other way round.
Media engagement is the workstream that is most often pulled out of sequence. The pressure to engage with media is real. Journalists are calling. The entity's silence reads as evasion. Communications functions, in good faith, want to set the record straight. The error is in the timing. Media engagement before the position is set – before the privilege architecture is settled, before the board has been briefed, before the disclosure assessment has been made, before the regulator engagement is mature – produces statements that the entity will live with for the duration of the matter. Some of those statements will turn out to be partial, or wrong as the matter evolves, or inconsistent with positions the entity later needs to take. Each of those is a forensic asset for adverse parties.
The right discipline is that media engagement happens only after the workstreams above are in alignment. That alignment may be hours, may be days, occasionally longer. While the entity is not yet in a position to engage substantively, it can communicate at a level that does not commit it: confirmation that an engagement with the regulator is underway, no further comment on the substance, an undertaking to update when there is information that can be shared. The discipline of not saying more than the position supports is, under pressure, the most valuable discipline in the workstream architecture.
Continuing operational management is the substrate. The matter, however serious, is not the entity. The entity has customers, employees, counterparties, regulators on other matters, ongoing transactions, capital structures, and financial periods that continue to move. The matter must not consume the entity's operational bandwidth in a way that produces secondary failures elsewhere. The discipline here is to ringfence the matter – a defined working group, a defined cadence, a defined reporting line – and to maintain the operational management of the rest of the business in parallel. Where the matter is allowed to overrun the operational rhythm, second-order failures begin to compound.
The strategic point in all of this is that the order of operations is the strategy. There is no separate communications strategy or regulatory strategy or disclosure strategy that can be designed independently. There is one strategy, sequenced across the workstreams, with the dependencies identified. The advisers who add value in a public regulatory matter are the ones who hold the sequencing discipline when the workstreams are pulling against each other. The advisers who do not are the ones whose individual workstream advice is technically excellent and collectively incoherent.
A single observation, in closing, on what makes this hard to do under pressure. The workstreams have different time signatures. The regulator engagement is patient. The disclosure assessment is fast. The board engagement is deliberative. The media is impatient. The pressure to act fastest comes from the workstreams whose time signature is shortest. The strategy depends on holding those workstreams to the cadence the slower workstreams require. Knowing this and doing it are different things; the latter is what experienced practitioners are paid to do.
This is general analysis. It is not advice on any specific matter. Readers should not act on it without engaging appropriate counsel.
