Whistleblowing is the act of reporting misconduct, irregularities or non-compliance within an organization through confidential channels.
Whistleblowing is a critical mechanism of ISO 37001 and ISO 37301. The standard requires confidential and, where possible, anonymous channels for employees and third parties to report suspicions of bribery, fraud or other irregularities without fear of retaliation. Whistleblower protection is a fundamental pillar.
ISO 37001 requires confidentiality. Anonymity depends on local legislation. In some jurisdictions it is mandatory; in others, only confidentiality is required.
Yes. ISO 37001 recommends the channel be accessible to employees, contractors, suppliers and other external stakeholders.
Need an assessment in this area?