Anatomy of a Disciplinary-Ready Docket

When an internal investigation ends up at a disciplinary hearing or, later, the CCMA, the quality of the docket decides whether findings hold. A well-built docket is not a pile of statements. It is an ordered, defensible record that lets a chairperson follow the evidence without the investigator in the room.

This article walks through the anatomy of a disciplinary-ready docket for a South African workplace context. It is practical guidance for security, loss-prevention and ER practitioners, not legal advice. Where a matter is serious or novel, take proper legal counsel.

What “disciplinary-ready” actually means

A docket is disciplinary-ready when someone who was never involved can open it, understand the allegation, see the evidence that supports each element of the charge, and trust that nothing was tampered with. In practice that means three qualities: completeness, traceability and fairness. Completeness means every element of the alleged misconduct is addressed. Traceability means each item of evidence can be tied to where it came from and who handled it. Fairness means the employee’s version is captured as carefully as the employer’s case.

The core sections

Most robust dockets share a common structure. You can adapt the order, but the components rarely change.

1. Cover and index. The case reference, the investigator, the date opened, the allegation in plain language, and a numbered index of every item. A chairperson should be able to navigate the whole file from this page.
2. Allegation and charge framing. A short statement of what is alleged, mapped to the specific rule, policy or code provision it breaches. If you cannot point to the rule the employee is said to have broken, the charge is not yet ready.
3. Investigation plan and timeline. What you set out to establish and the sequence of steps taken. This shows the process was methodical rather than a fishing expedition.
4. Witness statements. Signed, dated, attributed. Each statement should record who took it, when and where.
5. Documentary and physical evidence. CCTV stills or footage references, access-control logs, till reports, stock counts, photographs, emails. Each item needs a source and a handling record.
6. The investigator’s report. A neutral narrative that ties the evidence to each element of the allegation and identifies gaps honestly.
7. The employee’s response. Any explanation given, and evidence they asked you to consider.

Traceability: the part most dockets fail

Findings are challenged most often on where evidence came from and whether it could have been altered. Every substantive item should carry a short provenance note: the source, the date and time it was obtained, who obtained it, and where the original is stored. For CCTV, record the camera, the time range and who exported it. For a till report, note the system, the operator ID and the extraction date.

This discipline is easier when case records live in one system rather than scattered across inboxes and desk drawers. A structured investigation case management workflow keeps statements, exhibits and the investigator’s log tied to a single case reference, which is exactly what a chairperson wants to see.

Fairness is evidentiary, not just ethical

South African labour law places substantive and procedural fairness at the centre of any dismissal. A docket that only tells the employer’s side is weaker, not stronger. Capture the employee’s version, note what you did to test it, and record any exculpatory evidence you found. If you declined to pursue a line of enquiry, say why. A chairperson who sees that both sides were weighed is far more likely to accept your findings.

A docket is not built to win. It is built so that a fair decision-maker can reach a sound conclusion on the evidence in front of them.

Handling personal information responsibly

Dockets are dense with personal information: names, ID numbers, footage of identifiable people, sometimes health or financial detail. Under POPIA that information must be collected for a lawful purpose, kept secure, and shared only with those who need it. Restrict access, avoid gratuitous copies, and be ready to justify why each piece of personal information is in the file. Our POPIA approach covers how operational records can be handled proportionately.

A short readiness checklist

• Is the allegation mapped to a specific rule or policy?
• Does every exhibit have a source and a handling note?
• Are all statements signed, dated and attributed?
• Is the employee’s version captured and tested?
• Can a stranger navigate the file from the index alone?
• Is access to personal information limited and justified?

If you are reviewing how your team assembles investigation files, it can help to map your current sections against the checklist above and note where provenance or the employee’s version is thin. That single audit often reveals the quickest wins.