What's the Context of Legal Privilege?

Don't retain an outside vender directly, but do so through outside council. Insure that the vendor sends the final report only to outside council. A clearly differentiate between vendors, routine services, litigation related services. Don't include the report in copeo services before the incident and don't share it with anyone except for legal purposes.