A bottle of vodka was found in a box near the desk of an employee. It was 3/4 empty already.
A review of the CCTV showed that 4 employees were drinking in the same area with the a similar-looking box seen in the screen.
They were seen drinking from one glass but after some time the bottle/box was already out of camera range and what could be seen after is a litre bottle of orange juice being poured and shared.
The company policy states that drinking intoxicating drinks during work hours in the work area is punishable by termination.
The employees were given notices to explain and they said that it was not actually vodka they were drinking but cold water only and that they shared a glass because it was the only one available.
Would circumstantial evidence be enough to warrant sanctioning them? What other evidence could be used?