Very few companies are ready to handle government or regulatory investigations