In 2021, ISO published ISO 37002 on whistleblowing management systems and the handling of reports. How can an organization use its guidance?
Whistleblowing management systems
Reports can reveal problems that would otherwise remain hidden. A management system combines a reporting channel with internal processes for fair review and organizational learning—not rumor or gossip.
Processes in a reporting system
A system commonly includes:
- Receiving a report
- Assessing the information
- Investigating when appropriate
- Reaching and communicating outcomes
- Taking corrective action and improving controls
The response depends on the behavior reported, its seriousness, people involved, available evidence, and sensitive information at risk.
Protect the reporter's personal information and the integrity of the case. Apply appropriate governance, investigation, and information-protection practices.
The purpose of ISO 37002
The standard offers guidance that can help organizations address wrongdoing and strengthen compliance . A well-run system encourages reports, protects people who speak up, handles cases promptly, and supports corrective action.
Speaking up about actual or potential problems can help detect risks while supporting company policies and applicable obligations.
ISO 37002: practices for managing reports
Consider these starting points:
- Understand the organization and its context, including risks, structure, and stakeholders.
- Define the system's scope: languages, available platforms, geography, and internal or external channels.
- Understand what potential reporters and other stakeholders need and how reports will be handled and communicated.
- Set clear security and investigation procedures.
- Protect confidentiality and offer anonymity where appropriate and permitted.
- Explain policies and actions transparently while respecting privacy and fairness.
How can ISO 37002 guidance be put into practice?
EthicsGlobal's 360-degree model combines reporting and case-management services intended to support an ethics system. Ask our team about current capabilities and how they align with the guidance.
Learn more on the EthicsGlobal website
The model described in the source includes:
- Report intake
- Training and awareness in corporate ethics
- A software platform to manage, investigate, and resolve cases
- Assessment and benchmarking tools
- Advice on corporate good practices
These services may support alignment with ISO 37002 guidance; alignment should be assessed against the actual system rather than assumed from a marketing claim.
What can organizations expect?
- Earlier identification and reduction of misconduct risks.
- A stronger ethical culture and governance.
- A reputation for transparency and integrity when commitments are upheld.
- Greater confidence among customers and other stakeholders.
- More engagement from employees who see values applied in practice.
- More openness, trust, and responsibility in teams.
EthicsGlobal believes silence and weak accountability can enable misconduct. An integrated reporting system, supported by fair processes, can help address it.
To learn more, contact us through Twitter, LinkedIn and Facebook.