I've lived through it. A prior employer brought in a third party to assess the business practices and policies. Six months later, their investigation was complete, and the results passed back to upper management. Warm and fuzzy statements were made, promising changes. None were made. Fast forward a year or so, and the C level that was the driving force behind the third party investigation left the company.