If your organisation has a whistleblowing system in place, it was likely implemented to protect your employees and enable them to report their concerns easily – and to help your organisation identify and address risks.
Encouraging employees to speak up when they have an ethics and compliance question or concern creates a significant advantage for your organisation. It means you have an early warning system in place that allows you to address potential issues before they snowball—and better protect your organisation from reputational, financial and legal risk.
An effective reporting system that employees can easily use requires a number of key tools and processes in place. These include reliable hotline, helpline and web reporting options; an incident management system that captures, organises and assigns issues effectively; clear policies; strong investigation processes and senior leaders who are committed to holding all employees to the organisations’ ethical standards.
Communicating with Whistleblowing Incident Reporters
One essential element of a strong reporting system is often overlooked: communications with reporters and whistleblowers after they have logged their issue or concern, whether done anonymously or not.
1) Make Communications Reporter-Centric
When thinking about how to communicate with reporters, put yourself in their shoes. They may be upset, afraid, and pessimistic that their report will not be taken seriously. Make sure your tone is empathetic and express your appreciation for their willingness to come forward. Tell the reporter or whistleblower what the next steps will be with the case and when to expect an update. This demonstrates that you take their report seriously
2) Protect Confidentiality
Every named reporter trusts that their identity will be held in confidence during the reporting and investigation process. That means a reporter’s name will only be shared with those who need to know.
All parties involved in handling a report should understand this confidentiality requirement, but leaks do occur. The most common source of a leak is the reporter themselves. It is critical to inform everyone involved in a report, including the reporter, that names and details of the matter must be kept strictly confidential. To break this confidence can seriously damage the effectiveness of the reporting and investigation.
3) Provide Regular Updates
Reporters who are left in the dark with what is happening with a report are in a very difficult spot. The anxiety of not knowing can nag a reporter incessantly and employers should take steps to minimise it.
A good rule of thumb is to communicate with reporting employees every one to two weeks. Incident management software, like NAVEX’s EthicsPoint Incident Management system, includes a built-in “reminder” feature—task management functionality that helps ensure investigators never miss a follow-up deadline.
4) Make Sure Anonymous Reporters Understand the Need to Follow Up
Anonymous reporters need to understand their responsibility to follow-up on their initial report, especially during the first week—and what’s at stake if they don’t follow through. If investigators need more information to move forward with an inquiry and can’t get it, everyone loses.
You can help establish this expectation for follow-ups long before someone reports by making it part of your E&C training and awareness efforts. However, this directive also needs to be built into all anonymous reporting channels through messaging in the reporting interface itself.
5) Provide Investigator/Case Manager Contact Information
Whether or not a reporter chooses to remain anonymous, many organisations provide the name and contact information of the investigator and/or the manager assigned to the case. This information provides a personal touch and helps reassure reporters that someone is accountable for the investigation and managing the case process.
6) Make Sure Team Interactions with Reporters Are Tightly Coordinated
Work to ensure consistency across all teams who might interact with whistleblowers—including management, E&C, legal and HR. Poor coordination can give reporters mixed messages or conflicting information, and can undermine or derail the investigation process—and erode whistleblower trust. In addition, it’s essential to make sure that investigators are living up to the deadlines and expectations they’ve committed to.
7) Consider Using (Some) Standardised Messaging For Whistleblower Communications
While they can feel a bit less personal, standardised reporter communications can save valuable investigator time—and guarantee that all reporter communications align with your messaging.
Organisations that take this approach typically create messages that cover the most common scenarios (response to initial report, notification that the investigation is underway, notification that the investigation has closed, etc.). Another upside to standardised messages is that you can make sure they adhere to your policies and messaging.
8) Be Clear About What Can and Cannot Be Shared with Whistleblowers
Your legal department (or other leadership) may have specific rules regarding what information can and cannot be shared regarding the investigation—including disciplinary action taken. Whatever your organisation decides, make sure your investigators and case managers are aware of the rules regarding reporter follow-up. Organisations should establish a consistent standard regarding what information they share.
9) Provide Instructions for Further Follow-Up And Reporting After Case Closure
Whistleblowers should be notified when an investigation is complete, along with any information you can provide about the resolution. But they also need instructions about what to do if they have additional questions, believe their concern was not addressed or feel they have experienced retaliation.
While a whistleblower may be unhappy about the outcome of an investigation, it’s important to make it clear that you are still willing to listen and if retaliation is reported, take prompt action to address the behaviour. This support will reinforce your organisation’s commitment to creating a strong organisational culture.
10) Document All Whistleblower-Related Interactions in A Centralised Incident Management System
Centralising all information—from the initial incident report to the final communication with the reporter—has a multitude of benefits. From a whistleblower’s perspective, working within an incident management system provides a more structured and predictable experience.
From the company’s perspective, it provides a defensible audit trail should there be any question about how the case was investigated and resolved. It is also an essential interface to enable communications with anonymous reporters.
11) Prevent and Handle Retaliation
Fear of retaliation is the number one reason employees don’t report compliance concerns. Managers need to understand and avoid behaviours that may be perceived by whistleblowers as retaliatory—for instance, not saying hello, excluding them from meetings, assigning a disproportionate amount of undesirable work, etc.
Also, monitor your work group for retaliation against an employee whom you know reported an issue and may be at high risk for reprisal. Best practice is to check in with the employee monthly for one to three months, then taper to quarterly check-ins for up to one year. If a manager detects retaliation, swift action should be taken.
12) Reinforce Your Core E&C Programme Messages
Communication with reporters offers a great opportunity to emphasise key compliance messages and to further promote your organisation’s commitment to ethics and compliance. Including key phrases and terminology from compliance messaging in your whistleblower follow-up shows your organisation has a united mission.
For example, communications should emphasise that they did the right thing by speaking up and acknowledging their action helps maintain a culture of integrity at your organisation, while reinforcing the message that your organisation does not tolerate retaliation.
Effects of Whistleblowing on Employees: The Importance of Feedback
Introducing an internal reporting channel is only the beginning. The way you deal with reports once they have been raised is critical to its overall success.
Providing feedback to people who raise a concern is a simple but effective way to demonstrate you operate a ‘speak-up’ culture that reflects important messages about treating every report appropriately.
1. It provides reassurance that it’s ok to speak up
Acknowledging a whistleblowing report provides confirmation that it has been received and read - and is valued. This is, in many cases, the simplest and most effective action you can take to reassure those who have taken the often-difficult step to raise a concern.
It also provides a signal to others who may have workplace concerns, through word of mouth, that whistleblowing is encouraged and taken seriously within the company.
Potential whistleblowers are often torn between wanting to do the right thing, whilst not wanting to experience retaliation, betray their colleagues or employer, or even lose their job.
Feedback is an important way of showing your stakeholders that you value people who speak up about wrongdoing and take their concerns seriously.
2. It can prevent whistleblowers from going public
Acknowledging issues internally before someone decides to take their concerns to an external regulatory body, post on their social media network, or even speak to the press, should be a priority for every organisation that values its reputation.
Recent history is littered with examples of employees who have tried to alert their superiors about unethical or illegal activities but who, when their concerns were ignored, chose to ‘go public’.
Organisations need to acknowledge the whistleblowing report and provide feedback, regardless of whether the report is substantiated.
The acknowledgement and feedback the whistleblower receives is likely to create a connection and build trust between the employee and their speak-up service.
3. It can help build employee loyalty
Making employees and suppliers feel valued will not only help build an open culture within your company, but it may also increase their loyalty towards it.
Herzberg’s theory of motivation has shown that employees like to feel valued – and often find it more motivating than financial reward. He also found that when employees receive recognition or a sense of being valued, they can be an even greater asset to their organisation.
This reinforces the idea that while a whistleblower doesn’t always have to be vindicated, providing feedback to let them know that their report is being investigated shows they are valued.
Keeping the employee updated throughout the process will give your whistleblowing system a positive reputation.
4. It can create a “word of mouth” effect
According to Nielsen, 83% of people trust recommendations from people they know.
If people hear about a colleague’s positive experience, it may encourage others to come forward to reveal unethical behaviour within the workplace. A poor experience will likely have the opposite effect and deter people from coming forward with crucial information.
By constructing a positive journey from beginning to end for the whistleblower, you’ll increase the chances that users will act as advocates for your whistleblowing system.
5. It encourages an open culture that retains talent
Delivering feedback will show you’re listening and that you do genuinely want to protect your employees and suppliers. In turn, this will give employees confidence in the process, and in challenging inappropriate behaviour more openly.
A positive, ethical culture is a great way to differentiate yourself from your competitors. It takes commitment and energy, but building an open culture is a way of attracting and retaining talented and loyal employees.
6. It is becoming a legal requirement for many organisations
The EU’s new Whistleblower Protection Directive, which came into effect in 2021, includes an obligation for organisations to keep whistleblowers informed about their disclosure. This includes providing feedback about the follow-up to the report within a “reasonable timeframe” of not more than three months.
In its initial analysis of the directive, Transparency International also recommended the addition of “an obligation to acknowledge receipt of a whistleblower’s report” – an amendment which was adopted in the final text under Article 9.
Member States were obliged to write the Directive into national law by the 17th December 2021. Organisations affected by the legislation in each Member State will be required to comply with the law immediately (if they have more than 250 employees) or by 2023 (if they have 50-249 employees).
Remain objective
No matter how trivial a report may seem, it shouldn’t be ignored. It’s important to take reports seriously, not only from a whistleblower experience perspective, but also a risk management perspective.
Even seemingly ‘low-level’ reports may represent a whistleblower ‘testing the water’ before reporting a much more significant issue, or may even prove to be an important piece in an imminent or existing investigation.
Providing feedback helps keep people engaged in the process – something that could be vital during the evidence-gathering phase of an investigation.
Keep it simple and secure
The feedback process should be easy, as this will make the process quicker and more efficient for both the discloser and the investigator.
The process should allow for individuals to remain anonymous, but still allow investigators at the other end to be able to provide feedback.
NAVEX’s whistleblowing system, for example, provides a secure mechanism through which identified or anonymous reporters can communicate with their organisation about their report throughout the process.
Build trust and consistency
If you’re not providing feedback to your employees about reports they’ve raised, then it’s likely the effectiveness of your whistleblowing system is suffering.
Ensure you have the appropriate tools, personnel and funding allocated to your programme so that every report you receive results in a meaningful response.
A robust whistleblowing and incident management system will help automate initial acknowledgement, streamline the feedback and dialogue process, and build trust in your workplace whistleblowing process.