You can't enforce zero tolerance without good policies and accountability, which appears to have been sorely lacking. See recommendations III.C, HR Record Keeping; III.D, Track Agreements with Employees; IV.B, Mandatory HR Training; and all of section VI (especially "An Owner of Resources-Related Policies Should Be Identified or Hired").