If outside businesses or service providers are involved, what are the names of the businesses, who owns them, and where are they located? What products are involved, if any? Who else knows about the improper activities? Who can and would confirm that they occurred? How can we reach these witnesses?
What specifically occurred and what is wrong with it? Are there laws or regulations that govern what occurred? What documents would provide evidence of the improper activities? Where are the documents located? Who controls them?
Where did the event take place and when, Is it still on-going? Have you raised concerns via any other channel?
What would you like to see as an outcome? Do you have concerns for your welfare in sharing this information?