Checklist · Corporate

Responding to an SEC Investigation and Wells Notice: A Practical Checklist

15 U.S.C. § 78

Type
Checklist
Jurisdiction
National
Date
2024-03-22
Topic
Corporate

An SEC investigation rarely begins with a bang. It begins with a phone call from a staff attorney, a "voluntary" document request, or a subpoena that lands on the general counsel's desk on a Friday afternoon. What you do in the first seventy-two hours — whether you preserve documents, who you hire, what you tell your auditor, and whether anyone touches a laptop — will shape the outcome far more than anything you argue two years later. This checklist walks a company and its individual officers through the full arc of an SEC enforcement matter: triaging the inquiry, issuing the litigation hold, structuring a privileged internal investigation, producing documents, preparing witnesses for investigative testimony, weighing cooperation and self-reporting under the Seaboard factors, protecting insurance and advancement rights, managing disclosure to the market and the auditor, and finally responding to a Wells notice and negotiating a resolution. It is written for the general counsel, the outside lawyer, and the executive who has just learned that his own name is in the subpoena.

Responding to an SEC Investigation and Wells Notice: A Practical Checklist

Corporate > Securities Enforcement | Published 22 March 2024 - Updated 9 September 2025 | UpLaw - uplaw.us

The SEC almost never tells you what it thinks you did. It tells you what documents it wants. Your job is to read the request like a map, preserve everything, find the truth before the staff does, and never let a bad fact become an obstruction charge.

Keywords: SEC investigation, Wells notice, Wells submission, formal order, SEC subpoena, investigative testimony, Form 1662, Seaboard factors, cooperation credit, litigation hold, Upjohn warnings, Fifth Amendment, D&O insurance, advancement, parallel proceedings

The running example

Calder Point Robotics, Inc. is a Nasdaq-listed maker of warehouse automation systems. On a Tuesday in March, its general counsel receives a letter from the SEC's Division of Enforcement, Boston Regional Office, requesting — "on a voluntary basis" — documents concerning the company's revenue recognition for the fourth quarter, its arrangements with two distributors, and "all communications" of CFO Marisol Vance. There is no subpoena. There is no explanation. There is, however, a copy of SEC Form 1662 attached, which is the tell: the staff is treating this as a real investigation, not a courtesy call. Calder Point had a very strong Q4 after two weak quarters, and someone — a former sales director, a short seller, an auditor, a whistleblower under Exchange Act § 21F — has told the staff something. We will follow Calder Point and Ms. Vance through each phase.

Phase 1 — Identify what you have: informal inquiry, formal order, or subpoena

  • [ ] Read the request line by line and identify the type: a voluntary document request letter (informal inquiry under Exchange Act § 21(a)), a subpoena issued under a formal order of investigation (§ 21(b), 15 U.S.C. § 78u(b)), a Division of Examinations deficiency letter, or a FINRA/SRO inquiry.
  • [ ] Note whether SEC Form 1662 is attached. It always accompanies a request for information in an enforcement context and sets out the routine uses of the information you supply — including that it may be shared with the DOJ, other regulators, and self-regulatory organizations.
  • [ ] Ask the staff, politely and in writing, whether the matter is being conducted under a formal order and whether you may see it. The staff will often confirm the existence of a formal order and describe its subject matter, even if it will not hand over the document.
  • [ ] Calendar every return date on a subpoena. Contact the staff attorney immediately to negotiate scope and timing — deadlines are almost always extendable if you ask early and offer a schedule.
  • [ ] Identify the staff attorney, branch chief, and assistant director on the matter, and preserve every communication with them.
  • [ ] Determine whether the request reaches individuals by name (as it does Ms. Vance). A named individual changes everything about counsel structure.
  • [ ] Ask whether there is a parallel criminal referral. The staff will rarely answer, but the composition of the request (custodial devices, personal email, text messages) is itself evidence.
  • [ ] Do not decline a "voluntary" request casually. If you refuse, the staff can and usually will obtain a formal order and serve a subpoena, and your refusal becomes part of the cooperation narrative.

Why it matters, and the traps

The word "voluntary" is misleading. Section 21(a) of the Exchange Act authorizes the Commission to investigate whenever it "appears" that a violation may have occurred; § 21(b) gives subpoena power once the Commission issues a formal order, and § 21(c) allows the staff to run to federal district court to enforce a subpoena. In practice the informal stage and the formal stage differ mainly in leverage, not in seriousness. The staff often begins informally precisely because it produces faster, less lawyered productions.

The trap at Phase 1 is triage failure — treating the letter as a compliance chore and routing it to a paralegal. Calder Point's GC should immediately recognize three signals: the request names an individual, it demands communications rather than accounting records, and it covers exactly the quarter in which the company beat guidance. That is a fraud investigation, not an accounting review. The general architecture of a government inquiry — who has authority, what you must produce, and how to negotiate scope — is covered in Responding to a Government Subpoena or Investigation: A Practical Checklist; the SEC-specific machinery, from MUI to formal order to Wells to distribution of a Fair Fund, is mapped in SEC Enforcement: A Comprehensive Guide to Investigations, Wells Notices, and Remedies.

Phase 2 — Issue the litigation hold immediately (and never destroy anything)

  • [ ] Issue a written litigation hold the same day, before you know whether you have a problem. Do not wait for the internal investigation to "scope" it.
  • [ ] Suspend auto-deletion: email retention rules, Slack/Teams message expiration, voicemail purges, and any ephemeral-messaging application (Signal, WhatsApp, Wickr) used for business.
  • [ ] Identify custodians broadly at first — the CFO, controller, revenue accounting, sales leadership, the two distributor account managers, the CEO, and the audit committee chair.
  • [ ] Preserve personal devices and personal email if business was conducted on them. Off-channel communications have been the single most heavily penalized recordkeeping failure of the last several years for regulated entities, and for issuers they are the fastest route from an accounting case to an obstruction case.
  • [ ] Image departing employees' laptops before IT reimages them. Freeze the reimaging queue by name.
  • [ ] Preserve backup tapes, archived instances, and cloud tenants; document what is not reasonably accessible and why.
  • [ ] Send acknowledgment forms and track them; re-issue the hold at intervals and when custodians are added.
  • [ ] Instruct, in writing and in plain words: do not delete anything, do not "clean up" files, do not create new documents summarizing the events, and do not discuss the investigation with other custodians.

Why it matters, and the traps

Document destruction converts a survivable accounting case into a criminal one. Under 18 U.S.C. § 1519 — the Sarbanes-Oxley provision — it is a felony punishable by up to twenty years to knowingly alter, destroy, or conceal a record "with the intent to impede, obstruct, or influence" a federal investigation or matter within the jurisdiction of a federal agency, including a matter merely in contemplation. Section 1512(c) reaches corrupt obstruction of an official proceeding, and § 1512(b) reaches witness tampering, which includes telling a subordinate to "not worry about" a document. No revenue-recognition dispute is worth that exposure.

The trap is the well-meaning employee. At Calder Point, a regional sales manager, hearing that "the SEC is asking about the distributor deals," deletes a text thread in which he wrote "just take the units, we'll fix it next quarter." He is not a criminal mastermind; he is embarrassed. But that deletion, once reconstructed from the distributor's phone, becomes the government's best slide. The mechanics of scoping, drafting, and enforcing the hold — including preservation of ephemeral messaging and the Rule 37(e) framework that will govern any spoliation fight in the private class action that follows — are in Issuing a Litigation Hold and Preserving ESI: A Practical Checklist.

Phase 3 — Engage counsel; structure the internal investigation under privilege

  • [ ] Retain experienced securities enforcement counsel — not the company's corporate or M&A firm by default. Ask specifically about the firm's relationships with the relevant regional office and its trial capability, because the credible threat of litigation is what buys settlement leverage.
  • [ ] Decide who the client is and who directs the investigation: management, the audit committee, or a special committee of independent directors. Where senior management is implicated — as it is when the CFO is named — the investigation should be directed by the audit committee with its own counsel.
  • [ ] Paper the engagement so that the investigation is for the purpose of providing legal advice, conducted at the direction of counsel, with all interviews, memoranda, and forensic work performed to enable that advice.
  • [ ] Retain forensic accountants and e-discovery vendors through counsel (a Kovel-style arrangement) so their work is covered by privilege and work product.
  • [ ] Deliver Upjohn warnings at the start of every employee interview and document that you did: counsel represents the company, not the employee; the privilege belongs to the company; the company may waive it and disclose the interview to the government.
  • [ ] Keep interview memoranda counsel's mental impressions, not verbatim transcripts, and mark them as attorney work product.
  • [ ] Set a reporting cadence to the audit committee and keep board minutes accurate but spare (see below on minutes).
  • [ ] Decide early — and revisit — whether you will ever share the investigative findings with the staff, because that decision drives how you write everything.

Why it matters, and the traps

Upjohn Co. v. United States, 449 U.S. 383 (1981), is the foundation: the corporate attorney-client privilege extends to communications between counsel and employees at any level, made at the direction of superiors, concerning matters within the scope of their duties, for the purpose of securing legal advice. Hickman v. Taylor, 329 U.S. 495 (1947), and Fed. R. Civ. P. 26(b)(3) protect counsel's work product. But privilege is fragile in three specific ways. First, it protects the communication, not the underlying facts — an employee cannot refuse to tell the SEC what he did merely because he told a lawyer. Second, the employee may believe the lawyer is his lawyer, and if you do not give a clean Upjohn warning, courts have found a personal attorney-client relationship, which can disqualify counsel and complicate any waiver. Third, the crime-fraud exception can pierce it entirely.

The trap is the "just tell me what happened" investigation run by a business executive with a spreadsheet. Calder Point's audit committee, once it learns the CFO is a named custodian, must take control: management cannot investigate itself. The privilege architecture, Upjohn warnings, interview protocols, and documentation discipline are treated in depth in Conducting a Workplace Investigation: A Practical Checklist, and the board's own duty to respond to red flags — the Caremark oversight obligation that will be tested if a derivative suit follows — is in Corporate Governance and Fiduciary Duties: A Comprehensive Guide for Directors and Officers.

Phase 4 — Determine status: subject, target, or witness — for the company AND each individual

  • [ ] Ask the staff, through counsel, whether the company and each named individual are viewed as subjects of the investigation. The staff sometimes answers; it costs nothing to ask.
  • [ ] Map every individual who is exposed: the CFO, the controller, the revenue accounting manager, the sales VP, the CEO who signed the SOX §§ 302/906 certifications, and any director who traded.
  • [ ] Identify conflicts immediately. Company counsel cannot represent both the company and an officer whose interests may diverge — and once the company is considering cooperating, they diverge.
  • [ ] Determine whether any individual sold stock during the relevant period, which converts an accounting case into an insider trading case and drags in Rule 10b5-1 plan questions.
  • [ ] Assess statute of limitations exposure and whether the staff will ask for a tolling agreement (they usually will).

Why it matters, and the traps

The five-year limitations period of 28 U.S.C. § 2462 governs SEC actions for civil penalties, and Gabelli v. SEC, 568 U.S. 442 (2013), held that the clock runs from the violation, not from the SEC's discovery of it. Congress then addressed disgorgement directly: after Kokesh v. SEC, 581 U.S. 455 (2017) (disgorgement is a penalty for § 2462 purposes) and Liu v. SEC, 591 U.S. 71 (2020) (disgorgement is limited to net profits and should be returned to victims), the National Defense Authorization Act for Fiscal Year 2021 amended Exchange Act § 21(d) to authorize disgorgement expressly and to set limitations periods of five years for non-scienter claims and ten years for scienter-based claims (15 U.S.C. § 78u(d)(8)). That is why the staff asks for tolling agreements: they buy time on the penalty clock. Signing one is usually — not always — the cooperative move, but it is a real concession and should be traded for something, such as a narrowed document scope or a commitment to a Wells process.

The trap is drift. The company assumes it is a "witness" because the request focused on distributors; six months later the staff's questions are all about who approved the side letters. Status is a moving target, and counsel must re-read it after every testimony session. If any individual sold shares while holding the unpublished truth about the quarter, look immediately at Insider Trading Compliance and Rule 10b5-1 Plans: A Practical Checklist — a validly adopted, good-faith plan is an affirmative defense, and a plan adopted while in possession of material nonpublic information is an aggravating fact.

Phase 5 — Document collection, review, and production; the privilege log

  • [ ] Negotiate scope in writing: custodians, date range, search terms, and data sources. Get the staff to agree to a custodian-and-term protocol rather than producing to a literal reading of "all documents."
  • [ ] Agree on a production format (load files, metadata fields, Bates ranges) and a rolling schedule. The SEC's data delivery standards are specific; follow them or you will re-produce.
  • [ ] Collect forensically — do not let custodians self-collect. Self-collection is the single most common source of a completeness failure.
  • [ ] Run privilege review with a real second-level pass. Withheld documents get logged.
  • [ ] Produce a privilege log with enough detail to sustain each withholding: date, author, recipients, cc's, privilege asserted, and a description that conveys the subject without disclosing the advice.
  • [ ] Consider a confidentiality request under the Freedom of Information Act exemptions and Rule 83 of the SEC's Rules of Practice (17 C.F.R. § 200.83) for competitively sensitive material.
  • [ ] Track and log every production — cover letter, Bates range, date, custodian set — and keep a running completeness memorandum.
  • [ ] Do a gap analysis before you certify completeness: missing months, custodians with suspiciously thin mailboxes, text threads that reference attachments you never produced.

Why it matters, and the traps

A production is a testimonial act. Whatever you hand over becomes the staff's exhibit list, and whatever you hold back becomes the staff's suspicion. Under-inclusive productions are punished twice: once as an obstruction risk, once as a loss of cooperation credit that could have been worth millions.

The trap is the privilege log that says "legal advice re: accounting." That entry protects nothing, invites a challenge, and telegraphs that you have not thought hard about your assertions. Worse, over-designation — logging the CFO's routine business emails as privileged because a lawyer was copied — is how a company loses a privilege fight it should have won. Build the log as you review, not the night before it is due. The discipline is in Building a Privilege Log: A Practical Checklist, and the broader collection-and-production mechanics carry over from civil practice, mapped in Federal Civil Discovery: Mastering the Tools, Rules, and Pitfalls.

At Calder Point, the gap analysis catches it: the sales VP's WhatsApp export has a two-week hole around the quarter-end close. Counsel discloses the gap to the staff proactively, produces the forensic report, and reconstructs the thread from the distributor's side. That disclosure hurts. Concealing it would have been fatal.

Phase 6 — Witness preparation for investigative testimony

  • [ ] Confirm the format: investigative testimony under a formal order is sworn, transcribed, and taken by staff attorneys — with no judge, no adversary, and no right to cross-examine.
  • [ ] Confirm the witness's rights: under the SEC's Rules Relating to Investigations, 17 C.F.R. § 203.7, a witness compelled to testify is entitled to be accompanied, represented, and advised by counsel, and to inspect (or, on request, obtain a copy of) the transcript of his own testimony.
  • [ ] Understand what counsel may not do: there is no right to make speaking objections, no right to cross-examine, and no right to have your client sit in on another witness's testimony. Formal investigative proceedings are non-public unless the Commission orders otherwise (17 C.F.R. § 203.5), and in practice the staff takes each witness separately.
  • [ ] Prepare the witness on the documents, not on the answers. Walk the exhibits. Then walk them again.
  • [ ] Drill the three rules: listen to the question, answer only the question, say "I don't recall" only when it is true.
  • [ ] Warn the witness explicitly that false statements under oath are separately prosecutable (18 U.S.C. § 1621; 18 U.S.C. § 1001).
  • [ ] Never prepare two witnesses together, and never let witnesses compare notes afterward.
  • [ ] Order and review the transcript; errata are limited, so catch transcription errors quickly.

Why it matters, and the traps

Investigative testimony is not a deposition. There is no judge to call, the staff can ask anything remotely relevant to the formal order, and the transcript will be read back to the witness two years later, word by word. The general craft of testimony preparation — controlling the pace, handling documents, resisting the compound question — transfers directly from civil practice, and Preparing to Take a Deposition: A Practical Checklist is worth reading from the other side of the table, because it tells you exactly what the questioner is trying to do to your witness.

The trap is the helpful witness. Marisol Vance is smart, articulate, and wants to explain. She volunteers that "we always looked at whether the distributors could actually move the units" — an answer nobody asked for, which hands the staff the scienter theory it lacked. The most valuable four words in investigative testimony are "I don't understand the question," and the second most valuable are "Could you repeat that?"

Phase 7 — Individuals and the Fifth Amendment; separate counsel

  • [ ] Get separate counsel for any individual whose interests may diverge from the company's — immediately, and certainly before that individual testifies.
  • [ ] Decide who pays. Advancement is usually available (Phase 9), and paying for an employee's counsel is not, standing alone, obstruction — but be precise about it.
  • [ ] Conduct a real Fifth Amendment analysis for each individual: is there a real and appreciable risk of criminal prosecution, given any parallel DOJ interest?
  • [ ] Understand the collective entity rule: a corporation has no Fifth Amendment privilege, and a custodian of corporate records cannot refuse to produce them on the ground that they incriminate him personally (Braswell v. United States, 487 U.S. 99 (1988); Bellis v. United States, 417 U.S. 85 (1974)).
  • [ ] Understand the act-of-production doctrine for personal records: the act of producing documents may itself be testimonial as to their existence, possession, and authenticity (Fisher v. United States, 425 U.S. 391 (1976); United States v. Hubbell, 530 U.S. 27 (2000)).
  • [ ] Price the cost of invocation: in a civil proceeding, the factfinder may draw an adverse inference from a Fifth Amendment invocation (Baxter v. Palmigiano, 425 U.S. 308 (1976)) — and the SEC's action is civil.
  • [ ] Anticipate the employment consequences and whether invocation triggers termination for cause under the executive's agreement.

Why it matters, and the traps

This is the phase where the company's interests and the executive's interests visibly split, and where the company must be scrupulous. If Ms. Vance takes the Fifth, the staff will infer the worst, the plaintiffs' bar will plead it, and the board will face a termination decision. If she testifies without appreciating a parallel criminal exposure, she may talk her way into a § 1001 charge over a detail she got wrong.

The trap is the company that tries to manage the individual's decision — scripting it, conditioning severance on it, or dangling indemnification. Under Exchange Act Rule 21F-17 (17 C.F.R. § 240.21F-17), no person may take any action to impede an individual from communicating directly with the Commission staff about a possible securities-law violation, including by enforcing a confidentiality agreement. Severance agreements, NDAs, and "cooperation" clauses have drawn standalone enforcement actions on exactly this theory. Scrub every template before you hand one to a departing custodian. The criminal-side architecture — DOJ charging policy, corporate criminal liability under respondeat superior, and the individual's separate exposure — is set out in White-Collar Crime and Corporate Criminal Liability: A Comprehensive Guide.

Phase 8 — The cooperation and self-report decision (the Seaboard factors)

  • [ ] Read the Seaboard Report — Report of Investigation Pursuant to Section 21(a), Exchange Act Release No. 44969 (Oct. 23, 2001) — and grade yourself honestly against its criteria.
  • [ ] Work the factors: self-policing before the fact; self-reporting promptly and completely; remediation (discipline, controls, restatement, compensation clawback); and cooperation with the staff.
  • [ ] Decide whether to self-report at all — a decision that must be made early to be worth anything, and one that turns on whether the conduct is likely to surface anyway (whistleblower, auditor, short seller, restatement).
  • [ ] Decide what to share: findings only, or interview memoranda and a privilege waiver? Understand that producing Upjohn memoranda risks subject-matter waiver in the private securities class action that will follow.
  • [ ] Consider an oral download of factual findings without producing the underlying work product, and paper the non-waiver position.
  • [ ] Take remediation seriously and do it before the Wells stage: fire or discipline the responsible people, fix the control, retrain, and — if the company is subject to a listing-standards clawback policy under Exchange Act Rule 10D-1 — recover erroneously awarded incentive compensation.
  • [ ] Assess SOX § 304 (15 U.S.C. § 7243) reimbursement exposure for the CEO and CFO if a restatement follows misconduct.
  • [ ] Document the remediation contemporaneously. What you cannot prove, you did not do.

Why it matters, and the traps

Cooperation credit is real and it is large — it is the difference between a settled cease-and-desist order with a modest penalty and a litigated fraud case with an officer-and-director bar. But cooperation is not a mood; it is a record. The staff and the Commission look at what you actually did and when.

The trap is the privilege waiver made in a panic. Handing over interview memoranda is often the price of maximum credit, and it may well be worth paying — but the moment you do, the securities class action plaintiffs will argue that you waived work product as to the whole subject matter, and the value of the waiver to the SEC must be weighed against what it costs you in the private case. Model both. The private case is coming: read Securities Fraud Litigation: A Comprehensive Guide to Rule 10b-5 Private Actions alongside Class Action Litigation: A Comprehensive Guide to Rule 23 before you decide.

Calder Point's audit committee elects to self-report the side letters within three weeks of confirming them, terminates the sales VP, restates one quarter, gives the staff a detailed oral download of the facts with a written non-waiver reservation, and rebuilds its revenue-recognition controls. That package is what a Seaboard argument looks like. Whether the company built the compliance program that would have caught it in the first place is a separate question, answered by The Corporate Compliance Toolkit.

Phase 9 — Notify D&O carriers; advancement and indemnification

  • [ ] Give notice to the D&O carrier immediately. A "claim" under most Side B/Side C policies includes a formal or informal SEC investigation of a named insured, and many policies define it to include a subpoena or even a Wells notice; some cover pre-claim inquiry costs.
  • [ ] Read the notice provision and the reporting requirements literally. Claims-made-and-reported policies are unforgiving.
  • [ ] Do not assume a "voluntary request" is not a claim. Notice early and often; late notice forfeits coverage far more often than early notice prejudices it.
  • [ ] Get carrier consent before incurring defense costs, or you may fund the investigation yourself.
  • [ ] Watch the conduct exclusions (fraud, personal profit) and note that most are triggered only by a final adjudication — which is why settlement language matters enormously.
  • [ ] Confirm advancement rights for each individual: charter, bylaws, indemnification agreement, and the governing corporate statute (in Delaware, DGCL § 145, which permits advancement upon an undertaking to repay if it is ultimately determined the person was not entitled to indemnification).
  • [ ] Understand that mandatory advancement is broad and largely divorced from the merits — but that indemnification for a securities-fraud judgment may be unavailable as a matter of public policy.
  • [ ] Set a defense-cost allocation protocol between the company and the individuals, and preserve the priority-of-payments clause that pays individual insureds first.
  • [ ] Remember that insurance coverage is state law, and it varies. Whether late notice forfeits coverage absent prejudice, how "claim" and "related claims" are construed, whether defense costs erode the limit, and whether fraud-based losses are insurable at all are questions answered differently in California than in New York than in Delaware. Read the policy, then read the policy's choice-of-law clause, then research that state's rule. Nothing in this checklist states a nationwide coverage rule, because there is none.
  • [ ] Likewise, advancement and indemnification are creatures of the corporate statute of the state of incorporation and of the company's own charter and bylaws. Delaware is used below as the representative example; a Nevada, California, or New York issuer must check its own code.

Why it matters, and the traps

The D&O tower is the single largest asset in the room, and companies routinely damage it by treating notice as an administrative afterthought. The tender itself is a legal act with its own craft — see Tendering a Claim and Preserving Coverage: A Policyholder's Checklist, and, for the doctrinal framework of notice, exclusions, allocation, and the duty to defend, Insurance Coverage Law: A Comprehensive Guide for Policyholders.

The trap is the advancement fight the company picks and loses. A board angry at its CFO may want to cut off her legal fees. In Delaware, if the bylaws make advancement mandatory, the company will lose that fight in the Court of Chancery, pay her fees anyway, and pay her fees-on-fees for the privilege — while handing the SEC a story about a company punishing a witness. Fix the bylaws before you have a crisis, not during one.

Phase 10 — Disclosure: the market, the auditor, and the next 10-Q

  • [ ] Run the materiality analysis for the investigation itself under Basic Inc. v. Levinson, 485 U.S. 224 (1988) — substantial likelihood that a reasonable investor would consider it important — and document the judgment.
  • [ ] Determine whether disclosure is required in Item 103 (legal proceedings), Item 105 (risk factors), or Item 303 (MD&A, known trends and uncertainties) of Regulation S-K, and whether a Form 8-K item is triggered (for example, Item 4.02 — non-reliance on previously issued financial statements).
  • [ ] Do not create a duty to update by making a partial or optimistic statement. A half-true disclosure ("the company believes the inquiry is without merit") is a 10b-5 claim waiting to be filed.
  • [ ] Maintain Regulation FD discipline (17 C.F.R. Part 243). No selective briefing of analysts or large holders.
  • [ ] Brief the auditor. Under Exchange Act § 10A (15 U.S.C. § 78j-1), the auditor has its own statutory obligations when it becomes aware of information indicating an illegal act may have occurred — including, in the end, reporting to the Commission.
  • [ ] Prepare the audit response letter and the management representation letter carefully; both are discoverable and both are sworn in substance.
  • [ ] Reassess internal control over financial reporting and whether a material weakness must be disclosed.
  • [ ] Re-run SOX §§ 302 and 906 certifications with clear eyes before the CEO and CFO sign the next periodic report.

Why it matters, and the traps

This phase kills companies that survive the enforcement case. The SEC penalty is finite; the securities class action premised on a false statement about the investigation is not. The reporting mechanics, item-by-item, are laid out in Public Company Disclosure and Reporting: A Practical Checklist.

The trap is the CFO who is under investigation and still signing the certifications. Calder Point places Ms. Vance on administrative leave and appoints an interim CFO before the 10-Q. That is not a presumption of guilt; it is a control. It also matters that the board's decision-making is documented properly and contemporaneously — see Board Governance, Minutes, and Corporate Formalities: A Practical Checklist. Write minutes that show the board asked the right questions. Do not write minutes that summarize privileged legal advice.

Phase 11 — Parallel proceedings

  • [ ] Assume a DOJ referral is possible and coordinate defense strategy accordingly. What you say to the SEC, you say to the DOJ — Form 1662 tells you so.
  • [ ] Identify other regulators: FINRA or another SRO, PCAOB (if auditors are in scope), state securities regulators under blue-sky law, and possibly the IRS if the accounting affected tax positions — see Handling an IRS Audit and Tax Controversy: A Comprehensive Guide.
  • [ ] Expect a stock-drop class action within days of the disclosure and a derivative suit shortly after; coordinate the litigation hold and the privilege position across all of them.
  • [ ] Consider whether to seek a stay of the private action pending the enforcement matter (the PSLRA's automatic discovery stay during a motion to dismiss, 15 U.S.C. § 78u-4(b)(3)(B), does much of this work for you).
  • [ ] Manage joint defense / common interest agreements in writing, and recognize that they end the moment interests diverge.
  • [ ] Track books-and-records demands (DGCL § 220) from stockholders — they are the plaintiffs' bar's opening move.

Why it matters, and the traps

Everything is connected and nothing is confidential. The transcript of Ms. Vance's investigative testimony will be sought by the class plaintiffs; the internal investigation report shared with the staff will be sought by the derivative plaintiffs; and the DOJ will read all of it. The single most common strategic error is optimizing for the SEC in isolation. Take a whole-of-exposure view; The Securities Litigation and Enforcement Toolkit is the map of that terrain.

Phase 12 — The Wells notice: whether and how to make a Wells submission

  • [ ] Recognize the Wells notice for what it is: the staff has decided to recommend an enforcement action, has identified the charges it intends to recommend, and is offering you the opportunity, under 17 C.F.R. § 202.5(c), to submit a written statement to the Commission setting forth your position.
  • [ ] Get the charges in writing and press the staff for specificity: which statutory provisions, which theories, which respondents, and what remedies.
  • [ ] Request a pre-Wells meeting with the branch chief and assistant director, and a Wells meeting with the Division's senior officers. Sometimes you win here, quietly, and no submission is ever filed.
  • [ ] Calendar the deadline (typically short — often around two to four weeks) and negotiate an extension if you need one. Ask early.
  • [ ] Make the strategic decision whether to submit at all. A Wells submission is a voluntary statement that can be used against you: the Commission may share it, and it may be admissible in later proceedings. You are writing a brief that your adversary may quote at trial.
  • [ ] If you submit, choose your ground: legal (no violation on these facts — materiality, scienter, causation), factual (the staff has misread the record — show them the document), equitable (remediation and cooperation warrant a lesser charge), or remedial (the theory is right but the remedy is disproportionate).
  • [ ] Do not argue everything. A twelve-point Wells submission signals that you have no good point. Lead with your best one and prove it.
  • [ ] Do not create new factual assertions you cannot support. Every factual claim in a Wells submission is a hostage.
  • [ ] Consider a "bare-bones" or targeted submission that argues only the remedy or only the charge (for example, negligence-based Securities Act § 17(a)(2)/(3) rather than scienter-based Exchange Act § 10(b) and Rule 10b-5).
  • [ ] Coordinate the company's and the individuals' submissions — or deliberately do not, if their interests conflict.
  • [ ] Simultaneously open the settlement channel. Wells and settlement negotiations run in parallel far more often than they run in sequence.

Why it matters, and the traps

The Wells process is your only real audience with the Commissioners before an action is filed. It is a genuine opportunity — matters do get dropped or downgraded at the Wells stage — but it is also a discovery device the government did not have to pay for. The submission is not privileged in any meaningful sense; assume every word will be read by the DOJ and by the plaintiffs' bar.

The trap is the kitchen-sink submission written to make the client feel defended. At Calder Point, the winning submission is eleven pages, not eighty. It concedes that two side letters existed, demonstrates from contemporaneous email that the CFO was not on them and did not know of them, shows the restatement and the terminated employee, and argues that the appropriate resolution is a books-and-records and internal-controls action under Exchange Act §§ 13(b)(2)(A) and 13(b)(2)(B) rather than fraud. It asks for one thing. The full anatomy of the Wells process, the Commission's deliberation, and the remedies menu is in SEC Enforcement: A Comprehensive Guide to Investigations, Wells Notices, and Remedies.

Phase 13 — Settlement posture, remedies exposure, and collateral consequences

  • [ ] Price the remedies: injunctions and cease-and-desist orders (Exchange Act § 21C), civil penalties in tiers (§ 21(d)(3)), disgorgement plus prejudgment interest (§ 21(d)(3), (d)(7)), officer-and-director bars (§ 21(d)(2)), and, for professionals, Rule 102(e) practice bars (17 C.F.R. § 201.102(e)).
  • [ ] Do not quote a penalty number from memory or from a checklist — including this one. The statutory tier amounts are adjusted for inflation annually under the Federal Civil Penalties Inflation Adjustment Act, and the Commission publishes the current figures by release and in 17 C.F.R. Part 201, Subpart E. Pull the figure that applies to the date of the violation and confirm it before you put a number in front of a client or a board.
  • [ ] Understand the forum shift: after SEC v. Jarkesy (U.S. 2024), the Seventh Amendment entitles a defendant to a jury trial in federal court when the SEC seeks civil penalties for fraud, so the Commission cannot route those claims to an in-house ALJ. That materially strengthens the credible threat of litigating — use it.
  • [ ] Note the current administrative-law backdrop generally: Loper Bright Enterprises v. Raimondo, 603 U.S. 369 (2024), ended Chevron deference, so an agency's interpretation of its own statute is now reviewed de novo, with only Skidmore-style respect for its persuasiveness. Agency positions are more contestable than they were.
  • [ ] Understand the SEC's traditional "neither admit nor deny" settlement convention and the narrow circumstances in which admissions are demanded.
  • [ ] Map the collateral consequences before you sign: loss of the well-known seasoned issuer status; loss of the Securities Act Rule 506 private-placement safe harbor through "bad actor" disqualification; loss of the PSLRA safe harbor for forward-looking statements; debarment; and licensing consequences.
  • [ ] Request waivers of disqualification from the relevant SEC divisions in parallel with the settlement — not afterward.
  • [ ] Confirm how the settlement's language interacts with the D&O conduct exclusions and with any indemnification claim.
  • [ ] Build the resolution into the compliance program so the same facts cannot recur.

Why it matters, and the traps

The collateral consequences are frequently worth more than the penalty. A growth-stage issuer that loses Rule 506 eligibility may find its financing plan destroyed by a settlement whose dollar figure it considered a bargain. Negotiate the waivers as part of the deal, in the same conversation, with the same leverage.

Common Mistakes to Avoid

  1. Treating a "voluntary" request as optional. It is an investigation. Form 1662 is the proof.
  2. Delaying the litigation hold until you know whether you have a problem. By then, the auto-delete has run.
  3. Letting custodians self-collect. It looks efficient and it is how completeness failures are born.
  4. Skipping or mumbling the Upjohn warning. An employee who reasonably believes company counsel is his lawyer can blow up the privilege and disqualify the firm.
  5. Letting management investigate itself when management is implicated. Route it to the audit committee.
  6. Waiving privilege reflexively for cooperation credit without modeling the subject-matter waiver consequences in the class action.
  7. Preparing witnesses to be persuasive. Prepare them to be accurate, narrow, and calm.
  8. Ignoring Rule 21F-17. A boilerplate confidentiality clause in a severance agreement is its own enforcement action.
  9. Missing D&O notice deadlines or spending defense dollars without carrier consent.
  10. Fighting advancement. In Delaware, you will pay the fees and the fees-on-fees, and you will look vindictive doing it.
  11. Saying too much in the 10-Q about the investigation's merits and thereby creating a fresh misstatement.
  12. Writing an eighty-page Wells submission that argues twelve points, none of them well, and volunteers facts the staff had not found.
  13. Settling without waivers and discovering afterward that the company is a bad actor under Rule 506.
  14. Forgetting the individuals. The company can settle. The CFO cannot settle the company's way out of an officer-and-director bar.

The Consolidated Response Checklist

First 72 hours

  • [ ] Triage the request: informal, formal order, or subpoena; note Form 1662
  • [ ] Issue the litigation hold; suspend all auto-deletion, including ephemeral messaging
  • [ ] Retain securities enforcement counsel; determine whether the audit committee must direct the investigation
  • [ ] Notify the D&O carrier
  • [ ] Calendar the return date; open the dialogue with the staff attorney

Weeks 1–6

  • [ ] Negotiate custodians, search terms, date range, and a rolling production schedule
  • [ ] Forensically collect; image devices; preserve personal accounts used for business
  • [ ] Run privileged interviews with clean Upjohn warnings; retain forensic accountants through counsel
  • [ ] Identify individual exposure and retain separate counsel where interests diverge
  • [ ] Analyze materiality and disclosure; brief the auditor; assess Item 4.02 non-reliance
  • [ ] Confirm advancement and indemnification rights for each individual

Months 2–12

  • [ ] Produce on schedule; build the privilege log as you go; run a gap analysis before certifying completeness
  • [ ] Prepare and defend witnesses in investigative testimony; order and review transcripts
  • [ ] Decide on self-reporting, cooperation, and any privilege waiver — and remediate visibly
  • [ ] Manage the parallel class action, derivative suit, § 220 demand, and any DOJ interest
  • [ ] Negotiate any tolling agreement deliberately, not reflexively

Wells and resolution

  • [ ] Obtain the intended charges in writing; request pre-Wells and Wells meetings
  • [ ] Decide whether to submit; if so, lead with one argument and prove it
  • [ ] Open the settlement channel in parallel; price penalties, disgorgement, bars, and injunctions
  • [ ] Negotiate disqualification waivers as part of the deal
  • [ ] Confirm the settlement language preserves insurance and indemnification
  • [ ] Close the loop: remediate the control, document it, and prove it

Primary Authority

  • Securities Exchange Act of 1934 § 21, 15 U.S.C. § 78u — investigations (§ 21(a)), subpoena power under a formal order (§ 21(b)), judicial enforcement of subpoenas (§ 21(c)), civil actions, penalties, disgorgement, and officer-and-director bars (§ 21(d)); limitations periods for disgorgement (§ 21(d)(8)).
  • Exchange Act § 21C, 15 U.S.C. § 78u-3 — cease-and-desist proceedings.
  • Exchange Act § 21F, 15 U.S.C. § 78u-6, and Rule 21F-17, 17 C.F.R. § 240.21F-17 — whistleblower awards; prohibition on impeding communication with Commission staff.
  • Exchange Act § 10(b) and Rule 10b-5, 17 C.F.R. § 240.10b-5; Exchange Act §§ 13(a), 13(b)(2)(A)–(B) — reporting, books-and-records, and internal accounting controls.
  • Exchange Act § 10A, 15 U.S.C. § 78j-1 — auditor obligations on discovering a possible illegal act.
  • 17 C.F.R. § 202.5(c) — the Wells process (opportunity to submit a written statement before the Commission authorizes an action).
  • 17 C.F.R. §§ 203.5, 203.7 — SEC Rules Relating to Investigations: sequestration; rights of witnesses, including the right to counsel and to inspect the transcript.
  • 17 C.F.R. § 201.102(e) — Commission Rule of Practice 102(e) (censure and bars for professionals practicing before the Commission).
  • SEC Form 1662 — Supplemental Information for Persons Requested to Supply Information Voluntarily or Directed to Supply Information Pursuant to a Commission Subpoena (routine uses, including sharing with the DOJ and SROs).
  • Report of Investigation Pursuant to Section 21(a) of the Securities Exchange Act of 1934 and Commission Statement on the Relationship of Cooperation to Agency Enforcement Decisions ("the Seaboard Report"), Exchange Act Release No. 44969 (Oct. 23, 2001) — self-policing, self-reporting, remediation, and cooperation.
  • Sarbanes-Oxley Act § 304, 15 U.S.C. § 7243 — CEO/CFO reimbursement following a restatement due to misconduct; §§ 302, 906 certifications.
  • Exchange Act Rule 10D-1 and the exchange listing standards — clawback of erroneously awarded incentive compensation after an accounting restatement. (Implementation details and exchange rules continue to evolve; confirm the current standards.)
  • 28 U.S.C. § 2462 — five-year limitations period for civil penalties; Gabelli v. SEC, 568 U.S. 442 (2013).
  • 18 U.S.C. §§ 1001, 1512, 1519, 1621 — false statements; obstruction and witness tampering; destruction or falsification of records in a federal investigation; perjury.
  • Delaware General Corporation Law § 145 — indemnification and advancement of expenses (state-specific; other jurisdictions' corporate codes differ, and charter/bylaw language controls).
  • Fed. R. Civ. P. 26(b)(3) — work-product protection; Fed. R. Civ. P. 37(e) — ESI spoliation.
  • PSLRA discovery stay, 15 U.S.C. § 78u-4(b)(3)(B).

A note on currency — verify before relying. Several of the figures and regimes above move. Civil penalty tier amounts are inflation-adjusted every year. The Rule 10D-1 clawback listing standards and the SEC's data-delivery standards for productions are revised periodically. The Division of Enforcement's internal practices (the Enforcement Manual, cooperation tools, tolling-agreement templates) are matters of policy, not law, and change with administrations. And the post-Jarkesy forum landscape and the post-Loper Bright standard of review are both actively developing in the lower courts. Treat every number, threshold, and agency policy in this checklist as a pointer to the current source, not as the source.

Key cases

Secondary sources. The SEC's Enforcement Manual (Division of Enforcement) describes the staff's internal practices, including the Wells process, tolling agreements, and cooperation tools (cooperation agreements, deferred and non-prosecution agreements, and immunity requests). Loss, Seligman & Paredes, Securities Regulation, remains the standard treatise. Wright & Miller, Federal Practice and Procedure, governs the privilege and work-product questions that arise in the parallel civil case.

Related UpLaw Resources

Related Guides & Articles

Related Checklists

Related Toolkits

This checklist is general legal information from UpLaw (uplaw.us), not legal advice, and does not create an attorney-client relationship. SEC enforcement practice, remedies, and disqualification rules change over time, and state corporate law on indemnification and advancement varies; verify current requirements and consult qualified counsel before acting.