Are there rules about how to conduct internal investigations remotely?