Internal investigations have become commonplace since the post-Enron days when the Sarbanes-Oxley Act made good corporate governance mandatory. Similarly, government agencies and prosecutors have come to rely on self-investigation to carry out costly, intensive company probes. How can a company approach an imminent internal investigation -whether triggered by a subpoena or its own initiative – or be prepared to conduct one in the future?