It's not a policy if you "veer"
Unless the only policy is "Do the right thing!" wink
Seriously, when working in a corporate environment there may be the additional issue of "loyalty".
For the sake of the example, though of course your compensation is payed by "the company" which is an "immaterial" concept, you deal with people.
There is someone whom you usually know and meet in person that gives you the job (let's call him Executive #1), there is someone else that you are told to collaborate with (let's call him Executive #2) and to whom you should ask whenever you have any doubt on (say) Company roles, procedures. etc., there is the Legal Department guy (let's call it Shark #2 😯 ) who will possibly give you directives or opinions on how to proceed, there is a CEO (let's call him Shark #1 wink ) and a board of directors (that most probably you never met), etc.
Let's say that in the course of your investigation you find something only slightly or marginally related to the given scope/target of investigation that - even if not in itself illegal - may put in a bad light or in embarassing situation one of these people.
What do you do?
And do you do EXACTLY the same thing no matter WHO could be potentially affected by the finding?
jaclaz