You can't enforce zero tolerance without good policies and accountability, which appears to have been sorely lacking. See recommendations III.C, HR Record Keepi

You can't enforce zero tolerance without good policies and accountability, which appears to have been sorely lacking. See recommendations III.C, HR Record Keeping; III.D, Track Agreements with Employees; IV.B, Mandatory HR Training; and all of section VI (especially "An Owner of Resources-Related Policies Should Be Identified or Hired").