Iginla2010

The only thing you can probably do is tell the truth and hope for leniency. Given that your “friend” has already received a letter notifying him of an investigation, the statistics look pretty grim. Take this information from CFAI for instance:
“Notwithstanding this requirement, fifty-eight Level I candidates, twelve Level II candidates, and five Level III candidates continued to write on and/or erase their exams after time was called. The CFA Institute Professional Conduct Program investigated these cases and found that each candidate engaged in the conduct and thereby violated the CFA Program Exam Rules and Standards of Professional Conduct. Sixty-four of the candidates accepted the sanction of Private Censure/Reprimand and Voiding of Exam Results. Eleven of the candidates requested a Hearing Panel. After consideration of the evidence in each respective case, the Hearing Panels imposed the sanction of Private Censure/Reprimand and Voiding of Exam Results on the eleven candidates.”
http://www.cfainstitute.org/ethics/conduct/Pages/candidate_sanctions.aspx
I’m not sure what year this is from and maybe their enforcement level has changed. However, this basically says that all the “guilty” candidates got their results voided. Of the 11 who appealed, zero got the ruling overturned.
Hopefully, your case will have a different result. Good luck.