What is ISO 37002 - Whistleblowing management systems about?
Organizations worldwide increasingly want to introduce or improve internal policies and processes around how they handle whistleblowing. ISO 37002 is the first international standard on this topic. It provides a framework for establishing a clear and robust whistleblowing system within an organization. ISO 37002 gives guidelines for establishing, implementing, and maintaining an effective whistleblowing management system based on the principles of trust, impartiality, and protection in the following four steps:
- Receiving reports of wrongdoing
- Assessing reports of wrongdoing
- Addressing reports of wrongdoing
- Concluding whistleblowing cases
Who is ISO 37002 - Whistleblowing management systems for?
ISO 37002 on whistleblowing management system is useful for:
- Compliance manager
- Operational managers
- HR managers
- Any organization
Why should you use ISO 37002 - Whistleblowing management systems?
Whistleblowing is the act of reporting suspected wrongdoing or risk of wrongdoing. Studies and experience demonstrate that a large proportion of wrongdoing comes to the attention of the affected organization via reports from persons within or close to the organization.
ISO 37002 guides organizations for establishing, implementing, maintaining, and improving a whistleblowing management system, with the following outcomes:
- Identify and tackle wrongdoing more quickly, helping prevent harm to profits, reputation and to people, whether employees or customers
- Prevent or minimize loss of assets and aid the recovery of lost assets
- Ensure compliance with organizational commitments, policies and procedures
- Ensure compliance with legal and societal obligations
- Attract and retain personnel who are committed to the organization’s values and culture and discourage those who are not
- Demonstrate sound, ethical governance practices to society, markets, regulators, owners and other interested parties
- Operate efficiently and grow sustainably
- Make better-informed management decisions and control risk