8.9 - Raising concerns : Confidentiality of reporting process

The ISO 37001 Anti-Bribery Management Systems standard, instituted by the International Organization for Standardization in 2016, directs organizations globally in fortifying their anti-corruption frameworks. This standard is pivotal for both private and public entities of any size, focusing on active prevention, detection, and management of bribery risks.

How to Answer the Question

To ensure the confidentiality of the reporting process in an anti-corruption management system, organizations typically adopt the following strategies:

1.   Confidential Reporting Channels  :

  - Establish secure and confidential channels for reporting corruption, such as anonymous hotlines or encrypted online forms.

  - Reference for establishing secure channels can be found in [OECD's Anti-Bribery Guidelines](https://www.oecd.org).

2.   Clear Policy on Confidentiality  :

  - Define and communicate a clear policy that specifies how confidentiality is protected during the reporting and investigation process.

  - Detailed policies are discussed in the [UNODC's guide on anti-corruption](https://www.unodc.org).

3.   Protection Measures for Whistleblowers  :

  - Implement legal and procedural protections for whistleblowers to prevent retaliation and ensure their anonymity is preserved unless disclosure is necessary for the investigation.

  - Explore protections outlined by [Transparency International](https://www.transparency.org) for global standards.

Why It's Important

Ensuring confidentiality in the reporting process is crucial for:

-   Encouraging Reporting  : Employees and associates are more likely to report unethical behavior if they believe their identity will be protected.

-   Preventing Retaliation  : Protecting the identities of reporters guards against potential retaliation or harassment.

-   Maintaining Trust  : A confidential process maintains trust in the organization's ethics and compliance programs.

For more information on the importance of confidentiality, refer to the [International Anti-Corruption Academy’s resources](https://www.iaca.int).

Examples

-   Example A  :

 -   Context  : A multinational corporation introduces a secured online whistleblowing portal that ensures anonymity.

 -   Action  : They encrypt all communications and restrict access to data to designated compliance officers.

 -   Outcome  : Increased reporting of suspicious activities without fear of identification.

 - Guidance on setting up such systems can be seen at [Global Compliance Certification](https://www.globalcompliancecertification.com).

-   Example B  :

 -   Context  : A small business implements a policy that allows employees to report directly to an external ethics advisor.

 -   Action  : The advisor is contracted to maintain confidentiality and report only the nature of the issues to management, not the identities.

 -   Outcome  : Small business successfully handles a potential corruption issue without exposing the whistleblower.

 - Steps for such implementations are available through [ACFE's anti-corruption resources](https://www.acfe.com).

By implementing these measures, organizations reinforce their commitment to ethical conduct and ensure that employees can report corruption safely and confidentially.