7.2.2.1 - Protection for non-participation or reporting

ISO 37001

How to Answer the Question

To ensure the protection of employees who refuse to participate in high-risk activities or report corruption, organizations should implement the following measures:

1.   Establish a Whistleblower Policy  :

  - Clearly outline the protection offered to employees who report corruption or refuse to engage in high-risk activities. This policy should guarantee anonymity and protection from retaliation.

2.   Communicate the Policy  :

  - Ensure that all employees are aware of the whistleblower policy through regular training sessions and accessible communication channels.

3.   Create a Secure Reporting System  :

  - Implement a secure and confidential reporting system that allows employees to report suspicious activities without fear of reprisal.

4.   Supportive Management Practices  :

  - Train managers to handle reports of corruption sensitively and confidentially, ensuring that those reporting are supported and protected.

5.   Regularly Review and Update Protection Measures  :

  - Periodically review the effectiveness of the protection measures and make necessary adjustments to ensure they remain effective and relevant.

Why It's Important

Protecting employees who report corruption or refuse to participate in corrupt activities is crucial because:

-   Encourages Reporting  : It ensures that employees feel safe to report unethical behaviors, leading to a more ethical organizational environment.

-   Prevents Corruption  : By allowing employees to report safely, organizations can catch and address corrupt activities early, preventing further issues.

-   Enhances Compliance and Reputation  : Protecting whistleblowers reinforces the organization's commitment to ethical practices, enhancing its reputation and ensuring compliance with regulatory requirements.

Examples

-   Example A  :

 -   Context  : A financial analyst at a corporation discovers discrepancies suggesting embezzlement and reports it using the company’s anonymous hotline.

 -   Action  : The report triggers a confidential investigation, safeguarded by the whistleblower policy, ensuring no retaliation against the analyst.

 -   Outcome  : The investigation confirms the misconduct, leading to corrective action, while the analyst remains protected and continues their role without any negative consequences.

-   Example B  :

 -   Context  : An employee in the procurement department refuses to approve a supplier known for unethical practices, despite pressure from higher-ups.

 -   Action  : The employee reports the incident through a protected channel outlined in the organization's anti-corruption policy.

 -   Outcome  : The report leads to an internal audit of the procurement processes, reinforcing the company’s compliance with anti-corruption standards without any harm to the employee’s career.

By implementing robust protection measures, organizations not only comply with ISO 37001 but also promote a culture of integrity and transparency.

For additional resources and guidance:

- [Agence Française Anticorruption](https://www.agence-francaise-anticorruption.gouv.fr)

- [OECD Guidelines for Multinational Enterprises](https://www.oecd.org/corruption)