Select Page

Assessing your Whistleblowing Service

Your Results

Organisation Score

Business encouraging early disclosure

Whistleblower Score

Likelihood people will make disclosures

Systems Score

Practcal effective systems in place

Assessment

Please use the assessment tool below.  The results are a guide only, however they should start a conversation on whether the current solution is meeting the needs of the Board

Leadership Commitment

Leaders openly hostile to concerns being raised, and/or retaliate after concerns are raised
Leaders dismiss concerns as distractions
Leaders dismiss disclosures as distractions
Leadership tolerance but passive — no response to concerns or disclosures
Leaders endorse whistleblowing policy but rarely act on concerns
Leaders visibly support concerns and disclosures, act on findings
Leaders model transparency, resource system, reinforce ISO 37002

Scope of Policy

No Code of Practice – Code of Conduct
Limited scope – does not cover contractors or suppliers
Covers employees only
Covers employees and contractors
Covers employees, contractors, suppliers, stakeholders

Accessibility of Channels

No reporting channel available
Single channel (e.g., manager only)
Limited anonymous access
Multiple reporting channels (HR, hotline, email)
Multiple secure channels with 24/7 access and anonymity

Confidentiality & Data Protection

No protection of confidentiality
Confidentiality promised but not implemented
Confidentiality implemented inconsistently
Strong confidentiality controls in place
Confidentiality enforced, with legal/privacy compliance

Case Management & Investigation

No investigation process in place
Ad hoc investigations, poorly documented
Investigations done but slow, no escalation
Investigations consistent, documented, with timelines
Independent, resourced investigations, full audit trail

Protection & Support

No protection against retaliation or victimisation
Protection stated but not enforced
Some measures exist, inconsistently applied
Clear policy prohibiting retaliation, monitored
Comprehensive protection, support services available

Awareness & Training

No awareness campaign or training provided
Minimal awareness, policy hidden in documents
One-off communication, no refreshers
Regular training sessions for staff
Comprehensive training for all, leadership reinforcement

Culture & Effectiveness

Toxic culture, active discouragement of disclosures
Culture tolerates but discourages speaking up
Mixed culture, some managers supportive, others hostile
Generally supportive culture, concerns acted upon
Strong speak-up culture, celebrated and reinforced

Governance & Oversight

No oversight, board not involved
Management-only oversight, weak accountability
Some oversight but inconsistent reporting
Board receives regular reports
Independent board/audit committee oversight, strong accountability

Compliance & Benchmarking

No compliance with legal obligations
Minimal compliance, reactive approach
Complies with law but no benchmarking
Complies with law, some benchmarking against peers
Complies with law, aligned with international best practice (ISO 37002)

Feedback & Communication

No feedback provided to disclosers
Feedback rarely provided, inconsistent
Feedback given but delayed or vague
Clear feedback provided in most cases
Transparent, timely, and constructive feedback always provided

Independence of Reporting

Reports handled only by direct management
Some independence but management influence remains
Independent officer exists but under-resourced
Independent whistleblowing officer or unit handles reports
Fully independent, protected, and well-resourced reporting structure

Transparency & Reporting

No internal or external reporting of whistleblowing activity
Minimal reporting, limited to leadership only
Some reporting but lacks detail or frequency
Regular internal reporting of cases and outcomes
Transparent reporting internally and externally (public disclosures)

Continuous Improvement

No review or evaluation of whistleblowing system
Reviews happen only after failures or crises
Occasional review but limited follow-up actions
Regular reviews with some improvements implemented
Continuous review cycle, system evolves with best practice

External Access & Regulators

No access to regulators or external reporting mechanisms
Limited access to regulators, discouraged in practice
Some access permitted but unclear processes
Clear pathways to regulators or oversight bodies
Active encouragement to raise concerns with regulators when appropriate

Resources & Funding

No resources or funding for whistleblowing system
Minimal resources, underfunded, ad hoc support
Some resources allocated but inconsistent
Dedicated resources and budget allocated
Fully funded, resourced, independent system

Policy Integration

Whistleblowing policy isolated, no links to other policies
Minimal integration with HR or compliance
Partial integration with related policies
Integrated with HR, compliance, and risk management policies
Fully embedded across governance, compliance, and culture

Timeliness & Responsiveness

No timelines or responsiveness standards exist
Ad hoc responses, often very delayed
Some timelines exist but inconsistently applied
Defined response timelines usually met
Strict timelines always met with proactive updates

Accessibility & Inclusivity

System not accessible to diverse groups (language, disability, culture)
Limited accessibility provisions
Some inclusive measures but not comprehensive
System accessible in multiple formats/languages
Fully inclusive, universal design, culturally sensitive

Outcome Management

No follow-up or outcomes tracked
Minimal follow-up, outcomes unclear
Some outcomes tracked but inconsistently
Outcomes tracked, communicated internally
Outcomes tracked, communicated, and used for organisational learning

ISO Alignment

No awareness of ISO 37002
Limited awareness, no alignment
Partial alignment with ISO 37002
Good alignment, most principles followed
Full alignment with ISO 37002, system audited

What next?

If your current service is not performing, we can assist in:

Service Selection

It is always important to select a whistleblower service that is robust and can provide the supports as required. A service that supports the long term value of the business.

Support for Disclosers

Any service should ensure people making disclsoures are heard and understood.  There is a need to support the individualse beofre during and after the disclsoure.

Focus

While often the issues identifiied may relate to individual conduct, there is also potetnial for there to be underlying systems or systemic issues.  When considering the disclosure and the investigation it is important to consider a broader focus.

 

 

Learn More