The months before the subpoena
An SEC enforcement investigation is decided in the months before it formally exists. By the time the first subpoena lands, the charging theory is already taking shape.

The misconception — General counsel often treat the arrival of an SEC subpoena as the start of the enforcement matter. By the time staff issues a subpoena, the staff has typically been thinking about the matter for 6 to 14 months. Tips, market data, comparable matters, internal staff discussions — all of it has been quietly accreting into a working theory. The Office of Market Intelligence has flagged trading patterns. Enforcement staff has pulled comparable cases off the shelf. Often a Wells call has been circulated internally. The subpoena is not the start. It is the moment that working theory becomes visible to the company on the other side.
The window before — There is almost always a window — usually 3 to 9 months between the staff's first interest and the first compulsory process — where the company knows it has a problem and the regulator does not yet know the company knows. That window is short, and what the defense does in it shapes everything that follows. A privileged internal review under a non-waiver protocol. Coordinated D&O counsel for the individuals most exposed. A factual record assembled before any document is produced under subpoena. Companies that use the window well typically reduce the final resolution by 40 to 70% against the initial charging theory. Companies that don't use the window are responding to the regulator's narrative for the next two years.
The voluntary disclosure question — Should the company go to the regulator proactively? The answer is almost always "it depends on what we find," and the only way to know what you find is to look — quickly, thoroughly, and under privilege. Voluntary disclosure done well can shape the charging theory, qualify for cooperation credit (historically a 25 to 50% reduction in monetary remedies), and narrow the universe of charged conduct. Done poorly — premature, partial, or based on an internal review the regulator does not credit — it accelerates the timeline against the company and locks in a charging theory the company has effectively endorsed.
The parallel proceedings problem — Most SEC matters of any size have a DOJ counterpart sitting next to them. In the last five years, roughly 38% of significant SEC enforcement actions have had a parallel criminal component, and the agencies share information on a continuous basis. Information shared with one agency shapes the other. Some defense teams treat the two agencies as one channel. They are not. They are two channels with overlapping interests and divergent leverage — civil disgorgement and bars on one side, criminal exposure and incarceration on the other. The defense has to talk to both in a coordinated way without treating them as identical.
The personal exposure — Officers and directors need their own counsel from the first hint of a parallel proceeding. The company's interests and the officer's interests will diverge — often within the first six months, almost always before the Wells process. The earlier that representation is structured properly, the more options the officer has when the inflection point arrives. Joint defense agreements, common interest privilege, and advancement of fees are decisions that get made well or badly in the first ninety days. They do not get re-made later.
The discipline — None of this is dramatic. It is meetings, document holds, privilege protocols, and patient factual work. There is no podium moment in the pre-subpoena window. The cases that resolve well are the cases where the defense was already organized before the regulator was — and the cases that resolve badly almost always trace back to a quarter of inaction in the window between "we have a problem" and "they are formally looking."


