By Michael Waddington, civilian military defense lawyer and former Army JAG prosecutor and defense counsel.
A substantiated finding can trigger a GOMOR, an adverse evaluation, a security clearance suspension, an administrative separation board, or a referral to CID, NCIS, OSI, or CGIS — without any criminal charge ever being preferred. Gonzalez & Waddington defend service members in command-directed investigations worldwide. Call 1-800-921-8607.
Under investigation, or just been appointed a subject? The most consequential decisions in a command-directed investigation are made in the first seventy-two hours, usually before anyone tells you the investigation exists. Gonzalez & Waddington defend service members worldwide. Call 1-800-921-8607 for a confidential consultation.
A command-directed investigation is an administrative fact-finding inquiry ordered by a commander to determine what happened in a given incident and to recommend what the command should do about it. It is not a criminal investigation, it is not conducted by trained criminal investigators, and it is not neutral in the way a court is neutral. The investigating officer is appointed by the commander, reports to the commander, and answers the questions the commander wrote in the appointment memorandum.
That structure is the defining feature of the process and the source of nearly every problem in it. The investigating officer is typically a captain, major, or lieutenant commander with no investigative training, doing this as an additional duty on top of a full-time job, working to a suspense date. They are frequently senior to the subject, frequently in the same chain of command, and frequently under implicit pressure to reach a conclusion the command has already signaled it expects.
The output is a written report of investigation containing findings of fact and recommendations. Once the appointing authority approves those findings, they become the command’s official version of events. Every subsequent action — the reprimand, the evaluation, the clearance report, the separation packet — is built on that document, and every later decision-maker reads it as established fact rather than as one officer’s untested conclusion.
Service members frequently do not know which type of investigation they are in, and the answer changes their rights, their exposure, and the correct response. This is the single most useful distinction to get right early.
| Type | Who conducts it | Standard | Primary purpose | Rights warnings |
|---|---|---|---|---|
| Command-directed / AR 15-6 / command investigation | Appointed officer in the chain of command | Preponderance of the evidence | Fact-finding for command action | Article 31(b) required if the member is suspected |
| Criminal investigation | CID, NCIS, OSI, CGIS | Probable cause for referral; credible information for titling | Building a criminal case | Article 31(b) and counsel rights required |
| Inspector General investigation | Service or DoD IG | Preponderance of the evidence | Systemic issues, senior official misconduct, reprisal complaints | Warnings required if misconduct is suspected |
| EO, SHARP, or equal opportunity inquiry | EO professional or appointed officer | Preponderance of the evidence | Harassment and discrimination complaints | Article 31(b) required if the member is suspected |
| Safety or mishap investigation | Safety investigation board | Cause analysis | Preventing recurrence | Privileged; generally may not be used for discipline |
The safety investigation row deserves special attention. Safety and mishap investigation reports are privileged precisely so that witnesses will speak candidly, and they generally cannot be used as the basis for disciplinary or adverse administrative action. Commands that want to act on a mishap must run a separate collateral or legal investigation. When a command tries to short-circuit that by using privileged safety material in an adverse action, it is a serious defect — and it is one that only gets caught if someone is looking for it.
If your investigation is being run by CID, NCIS, OSI, or CGIS rather than by an appointed officer, see our pages on criminal military investigations and military investigation rights under Article 31(b).
Every branch runs administrative investigations under its own regulation, with its own terminology, timelines, and legal review requirements. Regulations in this area are reissued frequently; the governing version is the one in effect on the date the investigation was appointed.
An informal investigation is conducted by one investigating officer who gathers evidence, interviews witnesses individually, and writes findings. There is no hearing, no confrontation of witnesses, and no requirement that the subject be present for any of it. The subject may not even know the full scope of the allegations until the findings are complete.
A formal investigation or board of officers is different. Where a respondent is formally designated, that respondent generally receives written notice of the allegations, the right to be present, the right to counsel, the right to present evidence, and the right to cross-examine witnesses who appear. Those rights are meaningful — and they are rarely triggered, because commands overwhelmingly choose the informal route.
The practical consequence is that in the typical case, the subject of an investigation has no hearing rights at all. Their entire participation consists of an interview they may be ordered to attend and a written rebuttal submitted after the damage is largely done. That asymmetry is why what a service member says in that interview matters so much, and why saying it without counsel is so costly.
Steps four through six are where cases are lost. By the time findings are written, the record is set and you are arguing against a document rather than shaping one. If you have been notified that you are the subject of an investigation — or ordered to appear for an interview — call Gonzalez & Waddington at 1-800-921-8607 before you make a statement.
Article 31(b), UCMJ requires that a person subject to the Code who interrogates, or requests any statement from, a person suspected of an offense must first inform them of the nature of the accusation, advise them that they need not make any statement, and warn them that any statement may be used as evidence against them. This obligation applies to commanders and investigating officers, not only to criminal investigators.
The protection is broader than the civilian Miranda rule in an important way: Article 31(b) is not limited to custodial interrogation. A service member questioned in an office, standing at attention in a hallway, or asked to “just explain what happened” is entitled to the warning if the questioner suspects them of an offense and is acting in an official disciplinary or law enforcement capacity. Military courts examine both the questioner’s capacity and whether the exchange was something more than a casual conversation.
The recurring failure in command investigations is the suspect-witness problem. An investigating officer interviews a service member as a witness, the answers begin to implicate the member, and the IO keeps going without stopping to give warnings. Everything after the point at which the member became a suspect is legally vulnerable. Identifying that moment in a transcript or a sworn statement is a core part of defending these cases, and it is invisible to anyone who has not litigated Article 31 suppression before.
Where warnings are required and not given, the statement is generally inadmissible in a criminal proceeding under Article 31(d) and M.R.E. 304, and derivative evidence obtained through it may be subject to challenge as well. That protection is real — but it protects you at a court-martial, not necessarily at a separation board.
This area is widely misstated, including by commands and investigating officers, so precision matters.
Garrity v. New Jersey and Kalkines v. United States are civilian doctrines. Garrity holds that statements coerced from a public employee under threat of job loss cannot be used against them in a criminal prosecution. Kalkines holds that a federal civilian employee may be compelled to answer questions on pain of discipline only after being advised that the answers cannot be used criminally. These rules govern DoD civilian employees, dual-status technicians in a civilian capacity, and in some circumstances contractors — and defense counsel encounter them constantly in mixed military-civilian investigations.
For a uniformed service member, Article 31(b) is the operative protection, and it is stronger. A service member suspected of an offense cannot lawfully be ordered to make a self-incriminating statement. An order to answer under threat of punishment renders the statement involuntary, and Article 31(d) and M.R.E. 304 bar its use. A commander who wants compelled testimony from a suspected member must go through a formal grant of immunity — a deliberate legal step that requires the general court-martial convening authority, not something an investigating officer can improvise.
Where a member is genuinely a witness rather than a suspect, an order to cooperate and answer non-incriminating questions is lawful and refusing it can itself be an offense. Distinguishing “witness” from “suspect” in a fluid investigation is a legal judgment, not a guess, and the consequences of getting it wrong run in both directions.
One more distinction that trips people up constantly: a statement that is inadmissible in a criminal proceeding may still be usable administratively. Suppression protects you from a court-martial. It does not automatically protect your clearance, your evaluation, or your retention.
Findings in a command-directed investigation are made on a preponderance of the evidence — more likely true than not. There is no requirement of proof beyond a reasonable doubt, no requirement of corroboration, and no requirement that the accuser be cross-examined or even identified to the subject.
The rules of evidence do not apply. Hearsay is routinely accepted. Anonymous complaints are routinely investigated and can be substantiated. A single unsworn written statement, never tested by anyone, can support a finding that ends a career. Investigating officers may consider prior counseling entries, rumors reported by third parties, and their own impressions of credibility formed in a twenty-minute interview.
Because nothing gets excluded, a defense in this forum is not built on objections. It is built on demonstrating that the evidence the IO relied on is weak, internally inconsistent, contradicted by more reliable documentation, or the product of an inquiry that reached its conclusion first and gathered support afterward. That argument has to be made in writing, on the record, before the findings are approved.
A substantiated finding is an official determination that an allegation is more likely true than not. It is not a conviction, and it does not appear on a criminal record. It is nonetheless one of the most durable and damaging documents a service member can acquire.
Substantiated findings are reported into personnel and adjudicative systems. They are visible to promotion boards, to command selection boards, to security clearance adjudicators, and to any subsequent commander who pulls the file. They are cited in separation packets years later. A service member who was never charged, never tried, and never punished can spend the rest of a career explaining a finding they had one chance to rebut.
They also cross into the security clearance world through the national security adjudicative guidelines, where personal conduct, sexual behavior, alcohol involvement, financial considerations, and handling protected information are all assessed on a whole-person standard that expressly permits reliance on administrative findings. A clearance adjudicator does not need a conviction. They need a documented concern.
Command investigations frequently generate information that a commander then forwards to CID, NCIS, OSI, or CGIS. When that happens, a separate and often permanent consequence attaches: titling.
Under DoD policy governing titling and indexing, a subject may be titled in a criminal investigative report when there is credible information that they committed an offense. Credible information is a far lower threshold than probable cause, and lower still than the standard for preferring charges. A titled member’s name is entered into a federal criminal index accessible to law enforcement and to background investigators — and it remains there even if the case is closed with no charges. Congress has directed the Department to establish a process for correcting or expunging titling decisions in appropriate cases, and pursuing that correction is its own specialized fight.
The handoff most often happens for identifiable reasons: a statement made during the CDI suggests a UCMJ violation the command cannot resolve administratively, outside pressure escalates the matter, a new commander takes over and reassesses, or a complainant goes to an inspector general or a member of Congress. Anticipating the handoff — and preserving the Article 31 issues that will matter if it comes — is a defense decision that has to be made at the beginning, not after.
Even where no criminal charge ever follows, an approved investigation is a reusable instrument. The same document supports every one of the following:
Investigating officers are not investigators by trade, and the errors they make are recurring and identifiable. Each one is a point of attack in a rebuttal or a later board.
When adverse findings are referred to you, the written response you submit is frequently the only adversarial process the investigation will ever receive. It is also the document that every later decision-maker reads alongside the findings — the reprimand authority, the clearance adjudicator, the separation board.
Most rebuttals fail for the same reasons. They are too short. They argue emotion rather than evidence. They apologize, which reads as an admission. They assert that the IO was biased without demonstrating how, in the record, with citations. They attach five generic character letters and no documents.
A rebuttal that works is structured like a brief. It identifies each specific finding, states precisely what evidence the IO relied on, and shows why that evidence does not support the finding — with exhibits attached and cited. It identifies procedural defects by regulation and paragraph. It supplies the exculpatory evidence the IO did not gather: the full text thread rather than the excerpt, the timeline, the witness statements the IO never took. And it makes an affirmative case about the member’s record rather than only defending against the allegation.
You generally cannot defend what you have not read. Service members are entitled to request the report of investigation and its exhibits under the Freedom of Information Act, 5 U.S.C. § 552, and the Privacy Act, 5 U.S.C. § 552a. Releases are typically redacted to protect third-party privacy, and processing takes time — which is why the request should be filed early rather than after a deadline has already been set.
What comes back is often revealing. Interview notes contradict the summarized findings. Exhibits cited in support of a finding turn out not to say what the finding claims. Dates show conclusions drafted before the last interview. These are the materials that turn a rebuttal from an assertion into a demonstration.
A pattern we see regularly: a service member reports a safety problem, a fraud, a hostile work environment, or a superior’s misconduct — and shortly afterward becomes the subject of a command-directed investigation into unrelated matters.
The Military Whistleblower Protection Act, 10 U.S.C. § 1034, prohibits reprisal against a service member for making a protected communication to a member of Congress, an inspector general, or others in the chain of command designated to receive such complaints. An investigation initiated in reprisal is itself a personnel action that can be challenged, and the timeline between the protected communication and the investigation is often the most persuasive evidence available. Article 138, UCMJ provides a separate mechanism for complaining of a wrong committed by a commanding officer.
These cases require careful sequencing. Filing a reprisal complaint has consequences for the underlying investigation, and doing it in the wrong order can undermine both.
Command-directed investigations conducted overseas and in deployed environments carry elevated risk. Legal review capacity is thinner, timelines are compressed by rotation schedules, witnesses redeploy before they can be interviewed, and host-nation political sensitivities can drive command decisions in ways that have nothing to do with the evidence. Status of forces agreements add a parallel jurisdictional layer, and an administrative investigation can run alongside a host-nation criminal inquiry with information flowing between them.
We represent service members at installations across Germany, Italy, the United Kingdom, Japan, Korea, Guam, and Hawaii, and in deployed locations worldwide. Because we are civilian counsel, we are not tied to a single installation legal office or a single chain of command.
Command investigations reward early, disciplined intervention more than almost any process in military law, because the record is still being built and almost nobody contests it while that is true.
Control the interview or prevent it. We determine whether you are a witness or a suspect, whether the questioning is lawful, whether warnings are required, and whether you should participate at all. Where participation makes sense, it is prepared, scoped, and often submitted in writing rather than delivered in a room where an untrained officer takes notes.
Shape the record while the record is open. Investigating officers are permitted to receive evidence from the subject. Supplying the documents, the timeline, and the witnesses the IO would not otherwise find — early, organized, and cited — changes what the findings can say. It is far easier than attacking findings after they are approved.
Build the Article 31 and procedural record. If the matter later goes criminal, the suppression issues that matter will be the ones preserved now. We document who asked what, when the member became a suspect, and what warnings were or were not given.
Write rebuttals like briefs. Finding by finding, evidence by evidence, exhibit by exhibit, with the regulatory defects identified by paragraph. That document travels with the member for years and is read by every subsequent decision-maker.
Defend the downstream action as one case. The investigation, the GOMOR, the clearance action, the Article 15, the separation board, and any court-martial are a single strategic problem. We handle all of them, so the position taken in the rebuttal is consistent with the defense presented at the board eighteen months later.
Michael Waddington is a civilian military defense lawyer with more than twenty-five years of experience defending service members worldwide. He served as an Army JAG officer, prosecuting and defending courts-martial before entering private practice — direct experience with how investigative files are assembled, what commands do with them, and where they fail under scrutiny. He is the author of widely used books on trial advocacy and cross-examination and teaches litigation strategy to practicing attorneys. His practice covers courts-martial, Article 120 cases, CID, NCIS, and OSI investigations, command-directed investigations, GOMOR actions, administrative separation boards, and Boards of Inquiry across every branch.
Alexandra Gonzalez-Waddington is the founding partner of the firm and a civilian military defense lawyer with more than twenty years of criminal and military defense experience. Her practice spans sexual assault defense, violent offenses, domestic violence allegations, homicide, classified information cases, white-collar matters, and administrative proceedings. She is bilingual in English and Spanish. Her depth in collateral consequences — clearance exposure, retention, discharge characterization, and registration — shapes how the firm evaluates the long-term cost of an administrative finding that a service member might otherwise be tempted to let stand.
Together they have spent more than two decades defending Soldiers, Sailors, Airmen, Marines, Guardians, and Coast Guardsmen. The firm’s practice is deliberately structured to cover the entire arc of a case: the investigation, the reprimand, the clearance action, the court-martial, the separation board, and the long-term consequences to rank, retirement, clearance, and discharge.
Watch the military defense lawyers at Gonzalez & Waddington explain how they defend service members worldwide against UCMJ allegations, CID, NCIS, and OSI investigations, courts-martial, Article 120 cases, administrative separations, and GOMORs.
A command-directed investigation is an administrative inquiry ordered by a commander and conducted by an appointed investigating officer rather than by law enforcement. It uses a preponderance of the evidence standard, follows no rules of evidence, and produces written findings the commander may act on immediately.
They are the same category of proceeding under different service names. AR 15-6 is the Army regulation governing administrative investigations. CDI is the Air Force and Space Force term. The Navy, Marine Corps, and Coast Guard use command investigations under the JAGMAN and the Coast Guard Administrative Investigations Manual.
It depends on whether you are a witness or a suspect. If you are suspected of an offense, Article 31(b) requires warnings and you may decline to make any statement. If you are a genuine witness, an order to answer non-incriminating questions is lawful. Determine which you are before saying anything.
Yes, when an investigating officer or commander acting in an official disciplinary capacity questions a service member they suspect of an offense. Article 31(b) is broader than Miranda because it is not limited to custodial interrogation.
Generally no. Garrity and Kalkines are federal civilian employee doctrines. Uniformed service members are protected by Article 31(b), Article 31(d), and M.R.E. 304, which provide stronger protection. Garrity and Kalkines are relevant to DoD civilian employees and dual-status technicians in a civilian capacity.
Not a self-incriminating one, if you are suspected of an offense. Compelling such a statement renders it involuntary and inadmissible. A commander seeking compelled testimony from a suspected member must obtain a formal grant of immunity through the general court-martial convening authority.
Preponderance of the evidence — more likely true than not. There is no requirement of proof beyond a reasonable doubt, no corroboration requirement, and no requirement that the accuser be cross-examined.
Yes. Information developed in a command investigation is frequently forwarded to CID, NCIS, OSI, or CGIS, which can result in titling, a criminal investigation, and preferral of charges. Preserving Article 31 issues during the administrative phase matters for exactly this reason.
Titling means your name is entered as the subject of a criminal investigative report in a federal index. The threshold is credible information, which is lower than probable cause. A titling decision can persist even if the case closes with no charges, though a correction process exists.
You may request the report of investigation and its exhibits under the Freedom of Information Act and the Privacy Act. Releases are typically redacted for third-party privacy. File the request early, because processing takes time.
A substantiated finding can support a GOMOR, an adverse evaluation, a flag on favorable personnel actions, promotion removal, a security clearance suspension, nonjudicial punishment, or an administrative separation board — with no criminal charge ever being filed.
Yes. Administrative separation boards apply the same preponderance standard and admit the investigation as an exhibit. This is why the rebuttal you submit during the investigation matters years later.
Almost always, and it should be prepared with counsel. The rebuttal travels with the findings and is read by every subsequent decision-maker. A short, emotional, or apologetic rebuttal does more harm than none at all.
It happens, and it may constitute reprisal. The Military Whistleblower Protection Act, 10 U.S.C. § 1034, prohibits reprisal for protected communications to inspectors general, members of Congress, and designated recipients in the chain of command. Article 138, UCMJ provides a separate complaint mechanism.
Generally no. Safety and mishap investigation reports are privileged so that witnesses will speak candidly, and they are not a proper basis for disciplinary or adverse administrative action. A command wanting to act must conduct a separate collateral investigation.
Yes, and as early as possible. Most service members contact counsel after findings are approved, when the record is already fixed. Civilian counsel can be retained alongside your detailed military defense counsel and adds preparation capacity during the window when the outcome is still open.
Command-directed investigations are not harmless paperwork. They are the origin point for reprimands, clearance revocations, separation boards, and criminal referrals — and they are decided on a record built during a window when most service members have no lawyer and no idea how much is at stake.
Do not give a statement, consent to a search, or submit a rebuttal without speaking to experienced civilian counsel first. Gonzalez & Waddington defend service members in the Army, Navy, Air Force, Marine Corps, Space Force, and Coast Guard, worldwide. For experienced command-directed investigation defense lawyers and UCMJ defense attorneys, call 1-800-921-8607 or visit ucmjdefense.com.
Disclaimer: This page is provided for general informational purposes and is not legal advice. Reading it does not create an attorney-client relationship. Investigation regulations are revised frequently and procedures vary by service, installation, and command; the governing regulation is the version in effect on the date the investigation was appointed. Outcomes depend on the specific facts of each case.