The investigation is complete. The findings are clear. Your organisation – established to care for vulnerable individuals – has failed to prevent an incident of misconduct. Now comes the harder question: what next?