Teach on Udemy

Turn what you know into an opportunity and reach millions around the world.

Learn More

Your cart is empty.

Keep shopping

ISO 37002: Whistleblowing Management Systems

Name: ISO 37002: Whistleblowing Management Systems
Rating: 4.7 (251 reviews)

Build reporting channels, investigate wrongdoing and protect whistleblowers — ISO 37002:2021

Created byCristian Vlad Lupa, rigcert.education

Last updated 7/2026

English

Arabic [Auto],English

What you'll learn

Undestand how a whistleblowing management system can be applied
Establish a credibile and effective process for managing reports of wrongdoing
Become familiar with international best practices for managing whistleblowing cases
Gain a comprehensive understanding of the guidelines in ISO 37002
Master the principles of wrongdoing report investgation management
Understand what a whistleblowing policy should include

Course content

8 sections • 41 lectures • 4h 24m total length

Introduction5:55
Explore how whistleblowing safeguards transparency and accountability, with a focus on ISO 37002's guidance for a credible whistleblowing management system. Learn how organizations foster a speak-up culture and protect reporters.
Blowing the whistle6:05
Generic information about whistleblowing and definitions for concepts like wrongdoing and whistleblower
A whistleblowing management system (WMS)6:50
About what is a whistleblowing management system according to ISO 37002, about what are the benefits of adopting a management system. About the PDCA (Plan - Do - Check - Act) and its components in the context of the whistleblowing management system
About ISO 37002:20218:36
About the structure and the purpose of ISO 37002. About who is the targe audience of this standard and how can an organization benefit from the use of standard like ISO 37002.

Understanding the organization and its context5:02
About the identification of the internal and external issues that make up the context of the organization. Examples of internal and external issues that are relevant for most organizations
Understanding the needs and expectations of interested parties3:46
About interested parties (or stakeholders) and their requirements in relation to the organization's whistleblowing management system. Examples of typical stakeholders
The scope of the whistleblowing management system6:37
About what represents the scope of the whistleblowing management system and why it is important for the organization to establish from the beginning what is covered by its management system
Whistleblowing management system3:51
Generic requirements about the establishment, implementation, maintenance and continual improvement of the whistleblowing management system. A recapitulation of the guidelines in clause 4 of ISO 37002:2021
Sherron Watkins, the Enron whistleblower10:13
The story of Enron collapse and the actions of Sherron Watkins, the woman who tried to warn the management about the incoming disaster

Leadership and commitment8:34
About the importance of the support from the leaders of the organization for the success of the whistleblowing management system. About the difference between the top management and the governing body. What is each structure expected to do to support the WMS
Whistleblowing policy6:09
About the content and the role of the whistleblowing management system. Why the top management should ensure that a whistleblowing management system is documented and made available to all personnel
Roles, responsibilities and authorities7:23
About the whistleblowing management function and its responsibilities and authorities. A short recapitulation of the guidelines in clause 5 of ISO 37002, Leadership

Risks, opportunities and actions to address them7:36
About the need to identifiy risks and opportunities in relation to the whistleblowing management system. Some examples of risks and opportunities. About the need to address the risks and opportunities identified
Objectives for the whistleblowing management system5:21
About the whistleblowing management system objectives and the plans of the organization for their achievement. The guidelines of ISO 37002 for how the objectives should be established
The planning of changes5:17
About managing changes to the whistleblowng management system. Some examples of changes and how they should be managed by the organization to avoid negative consequences. A recapitulation of the guidelines in clause 6 of ISO 37002:2021.
The Facebook papers7:29
The story of Frances Haugen and her whistleblowing about the consequences of the algorithms implemented by the social media giant.

Resources4:15
About the resources needed for the whistleblowing management system and how they should be made available
Competence5:16
About the process to ensure competency for all those who work on behalf of the organization. Actions to ensure adequate competence.
Awareness and training for personnel7:56
The guidelines of ISO 37002 for the awareness of personnel about the whistleblowing management system and its role. The training that the organization shoud provide to all those who work for or on its behalf.
Training for leaders and other specific roles4:53
The guidelines about training for those who hold specific roles in the whistleblowing management system. What subjects should be included in the training of the managers who handle whistleblowing reports
Communication5:06
About the processes for internal and external communication in relation to the whistleblowing management system.
Documented information and its control8:43
About the types of documents that are part of the whistleblowing management system. Guidelines for creating and updating documents. About the controls for documents that the standard recommends.
Data protection5:34
About the guidelines of ISO 37002 for adequate data protection in relation to the content of whistleblower reports and other documents generated from the whistleblowing management system
Confidentiality7:43
About the methods to ensure that whistleblowers, the subjects of reports and other interested parties are afforded adequate confidentiality
Jeffrey Wigand. The big tobacco whistleblower8:51
About the whistleblowing story of Dr. Jeffrey Wigand who exposed the ugly truth behind the knowledge of tobacco companies about nicotine addiction and the harmful effects of smoking.

Operational planning and control5:11
Generic guidelines of ISO 37002 about the process of managing whistleblowing cases. About the steps of this process, the need to control any outsourced activties and to keep sufficient documented information
Receiving reports of wrongdoing7:03
About establishing and maintaining visible, accessilble and secure reporting channels. Examples of reporting channels that an organization may implement for reporting wrongdoing
Assessing reports of wrongdoing7:58
About the assessment of the whistleblower reports received and their prioritization based on risk. About the assessment and prevention of the risk of detriment to the whistleblower and to other relevant parties.
Addressing reported wrongdoing. Principles for the investigation6:22
About the investigation of whistleblower reports and the priniciples that the organization should follow when conducting this investigation
Protecting and supporting the whistleblower6:15
About the measures that the organization should take to protect and to support whistleblowers, including remediation measures that may be necessary
Protecting the subjects of a report and other relevant parties3:56
About the protection that the subjects of whistleblower reports and other intrerested parties may be entitled to
Concluding whistleblowing cases7:49
About the guidelines for concluding whistleblowing cases. Which are the situations in which a whistleblowing case can be concluded. A recapitulation of clause 8 of ISO 37002 about the process for managing whistleblower reports
Decision to become a whistleblower8:15
About the decision to become a whistleblower. Some tips for those contemplating the idea of blowing the whistle.
https://www.amazon.com/Corporate-Whistleblowers-Survival-Guide-Committing/dp/1605099864

Monitoring, measurement, analysis and evaluation6:59
About establishing indicators, monitoring and measuring the performance of the whistleblowing management system. Examples of indicators that can be used
Internal audit7:37
About the guidelines in ISO 37002 for the internal audit of the whistleblowing management system.
Management review5:09
About the guidelines for conducting management reviews of the whistleblowing system. The recommended subjects for the management reviews. A short recapitulation of the main subjects in clause 9 of ISO 37002, Performance evaluation

Continual improvement4:20
About improving continually the whistleblowing management system. Ideas for improvement areas and opprtunities
Nonconformity and corrective action6:01
About how to manage nonconformities by applying corrective actions. Examples of nonconformities for the whistleblowing management system
Edward Snowden and the NSA surveillance programs6:38
About the whistleblowing story of Edward Snowden and the documents he leaked to the press about the NSA surveillance programs
An overview of the whistleblowing management system8:17
A recapitulation of the main elements of the whistleblowing management system according to the guidelines in ISO 37002:2021
Thank you and good bye!3:27
Thank you for participating and I hope to see you again in another ISO-related course on Udemy!

Requirements

No previous experience of knowledge is required, but familiarity with ISO management system standards can be useful

Description

Whistleblowing — the reporting of suspected or actual wrongdoing — has moved from a voluntary good practice to a legal obligation. The EU Whistleblowing Directive now requires organizations with 50 or more employees to establish internal reporting channels, and similar requirements are spreading worldwide. ISO 37002 is the international standard that shows organizations how to do this well: it provides guidelines for establishing, implementing and maintaining an effective whistleblowing management system built on trust, impartiality and protection.

This course walks you through every recommendation of ISO 37002, giving you the knowledge to establish a robust whistleblowing mechanism in any organization — one that encourages the reporting of wrongdoing, improves organizational culture and governance, mitigates the risks and costs of misconduct, and protects those who speak up from retaliation.

Structured to mirror the standard

The course begins with the fundamental concepts, terminology and components of a whistleblowing management system, then covers all key provisions of ISO 37002:

Understanding the organization's context and establishing the scope of the system
Developing a whistleblowing policy
The role and responsibilities of the whistleblowing management function
Identifying risks and opportunities and setting whistleblowing objectives
Training, awareness and communication
Documented information and its control
Internal audits, management review and handling nonconformities

The whistleblower report life cycle, step by step

A dedicated section covers the complete process for dealing with whistleblower reports:

Establishing effective and accessible reporting channels
Receiving and assessing reports of wrongdoing
Investigating reported wrongdoing impartially
Protecting whistleblowers from retaliation and negative consequences
Concluding and formally closing cases

Learning from real cases

The course draws on notable real-world whistleblowing cases — Edward Snowden, the Facebook Papers, the Enron scandal, and Dr. Jeffrey Wigand's stand against the tobacco industry — to show what works, what fails, and why protection matters.

Who this course is for

Compliance officers, ethics officers and legal teams implementing whistleblowing channels (including for EU Whistleblowing Directive compliance)
HR professionals responsible for speak-up culture and workplace investigations
Internal auditors and risk managers assessing governance controls
Managers and business owners preparing their organization for regulatory requirements
Anyone interested in business ethics, corporate governance and organizational integrity

Understand what an effective whistleblowing system requires, and give your organization the tools to build a culture of accountability, transparency and integrity.

Enroll today and start your journey toward ISO 37002 compliance.

Who this course is for:

Compliance professionals
Managers who handle whistleblowing cases
Quality and compliance managers
Compliance auditors
HR specialists
ISO standards professionals

ISO 37002: Whistleblowing Management Systems

What you'll learn

Explore related topics

Course content

Introduction to whistleblowing management4 lectures • 27min

Context of the organization (clause 4 of ISO 37002:2021)5 lectures • 29min

Leaderhip (clause 5 of ISO 37002:2021)3 lectures • 22min

Planning (clause 6 of ISO 37002:2021)4 lectures • 26min

Support (clause 7 of ISO 37002:2021)9 lectures • 58min

Operation (clause 8 of ISO 37002:2021)8 lectures • 53min

Performance evaluation (clause 9 of ISO 37002:2021)3 lectures • 20min

Improvement5 lectures • 29min

Requirements

Description

Who this course is for: