In terms of additional steps, I honestly think you're doing everything that should be done. The only thing I can think of is finding some way for the reporting to be external to the organization, so that no politics are involved and it would be objective. I don't know if that's possible. That's the only thing I could add.
