8.9 - Raising concerns : Allowance for anonymous reports

The ISO 37001 Anti-Bribery Management Systems standard, instituted by the International Organization for Standardization in 2016, directs organizations globally in fortifying their anti-corruption frameworks. This standard is pivotal for both private and public entities of any size, focusing on active prevention, detection, and management of bribery risks.

How to Answer the Question

Organizations can enable anonymous reporting by adopting the following practices:

1.   Anonymous Reporting Channels  :

  - Set up dedicated channels such as hotlines or online forms that guarantee anonymity. These channels should be easily accessible and well-publicized within the organization.

  - For detailed guidelines on setting up these systems, refer to [NAVEX Global](https://www.navex.com), which provides resources on implementing effective reporting systems.

2.   Clear Policies on Anonymity  :

  - Develop and disseminate clear policies that describe how anonymity is preserved and under what circumstances (if any) it might be waived. Ensure all employees are aware of these policies.

  - The [OECD Guidelines for Multinational Enterprises](https://www.oecd.org) offer a framework for establishing such policies.

3.   Training and Communication  :

  - Regularly train employees on the importance of the reporting system and the protections it offers, including anonymity. This helps to build trust in the system’s integrity and effectiveness.

  - Training resources can be found at the [International Anti-Corruption Academy](https://www.iaca.int).

Why It's Important

Facilitating anonymous reports is critical for:

-   Encouraging Disclosure  : Many individuals may fear retaliation or damage to their relationships at work. Anonymous reporting mechanisms encourage more people to come forward with their concerns.

-   Detecting Issues Early  : By enabling anonymous reports, organizations can detect and address issues before they escalate, thereby reducing potential damage.

-   Compliance with Laws and Regulations  : In some jurisdictions, providing channels for anonymous reporting is a legal requirement under whistleblowing laws.

Further information on the importance of anonymous reporting can be found through the [Transparency International](https://www.transparency.org) website.

Examples

-   Example A  :

 -   Context  : A technology company implements an anonymous reporting tool integrated into their internal systems.

 -   Action  : The company ensures the tool is encrypted and external to the corporate IT environment to protect the identities of reporters.

 -   Outcome  : Increased reports of misconduct and proactive resolution of potential issues.

 - Additional details on such tools can be explored at [WhistleB](https://www.whistleb.com), which specializes in whistleblowing solutions.

-   Example B  :

 -   Context  : A healthcare provider establishes a third-party managed hotline for anonymous reports.

 -   Action  : The hotline is managed by an external firm to ensure confidentiality and impartiality, with reports being passed to the organization's compliance committee.

 -   Outcome  : Employees report several cases of non-compliance, leading to improved processes.

 - Guidelines on third-party management of such systems are available at [EthicsPoint](https://www.ethicspoint.com).

By integrating these measures, organizations not only comply with legal requirements but also promote a culture of honesty and integrity.