You don't need to consider conscience and morality to implement harsher punishments for hiding evidence or not making things right after being informed vs. more lenient punishments when the individual or organization has shown to proactively attempted to remedy the situation and has taken actions to prevent it from happening again. It's all about making sure that the incentives are aligned with good behavior, even after initial bad behavior.