The board acted on whistleblower reports by ordering an external review that found a breach of conduct rules.
