ISO 37002:2021 Whistleblowing Management Systems

Name: ISO 37002:2021 Whistleblowing Management Systems
Rating: 3.8 (8 reviews)

Master the global standard for receiving, assessing, addressing, and concluding whistleblowing reports

Role Play

Created byISO Horizon

Last updated 6/2026

English

What you'll learn

Apply the four guiding principles of ISO 37002:2021 — trust, impartiality, protection, and accessibility — to every design decision in your programme
Build a clause-aligned whistleblowing management system covering context, leadership, planning, support, operation, evaluation, and improvement
Design accessible reporting channels that satisfy confidentiality, anonymity, and data protection obligations under the EU General Data Protection Regulation
Run a disciplined four-stage report lifecycle covering receiving, assessing, addressing, and concluding reports of wrongdoing
Investigate concerns fairly while protecting both whistleblowers and persons mentioned in reports from detrimental conduct
Map your programme to the EU Whistleblowing Directive 2019/1937, Sarbanes-Oxley Section 806, and Dodd-Frank Section 922 in parallel
Set objectives, metrics, and KPIs that prove the programme works to top management, the board, and external auditors
Conduct internal audits and management reviews that drive corrective action and continual improvement of the system
Train workers, managers, and the whistleblowing function on their roles, rights, and obligations under the standard
Build a single multi-jurisdiction programme that integrates with ISO 37301 compliance and ISO 37001 anti-bribery management systems

Course content

33 sections • 28 lectures

Why Whistleblowing Management Matters Today7:20
This lecture sets the stage by exploring why whistleblowing has moved from a reactive human resources problem to a strategic governance priority for boards, regulators, and investors. Examine how scandals at global corporations, accelerated regulation across the European Union and the United States, and rising public expectations around ethics have made organisations realise that a credible internal reporting channel is the single most effective early warning system available. Explore how unreported wrongdoing produces financial loss, reputational damage, regulatory fines, and shareholder litigation, and how a well-designed whistleblowing management system turns potential disasters into opportunities for early correction and learning. The lecture frames ISO 37002:2021 as the international response to this need — a single, authoritative set of guidelines that organisations of any size, sector, or jurisdiction can adopt to build trust and demonstrate good governance to every interested party.
Introducing ISO 37002:2021 — Scope and Status8:37
This lecture introduces ISO 37002:2021 as a guidance standard rather than a requirements standard, meaning it cannot be certified against in the same way as ISO 9001 or ISO 37001 yet still provides authoritative best practice that auditors, regulators, and courts increasingly treat as the benchmark of reasonable conduct. Explore the publication date of July 2021, the work of ISO technical committee TC 309 on Governance of Organizations that produced the document, the scope that makes the standard applicable to organisations of any size, sector, and ownership type, and the Harmonized Structure that aligns its ten clauses with all other modern ISO management system standards. The learner will leave understanding precisely what ISO 37002 promises to deliver, what it deliberately leaves to each organisation to decide, and why even a non-certifiable standard has enormous influence on regulators, courts, and stakeholders.
The Four Guiding Principles of Whistleblowing9:32
This lecture unpacks the four guiding principles that underpin every element of ISO 37002:2021 — trust, impartiality, protection, and accessibility. Examine how trust requires the organisation to demonstrate through visible leadership and consistent action that reporters will be taken seriously, how impartiality demands that conflicts of interest be identified and managed at every stage of report handling, how protection forbids any detrimental conduct against the whistleblower and extends in modified form to persons mentioned in reports, and how accessibility means reporting channels must be available, understandable, and usable by every potential reporter regardless of language, role, disability, or geography. The learner will see how these four principles serve as the constant test against which every policy choice, channel design, and investigative decision should be measured before it is approved.
Key Terms and Definitions8:04
This lecture clarifies the precise vocabulary of ISO 37002:2021 so the learner can read the standard, draft internal policy, and brief stakeholders without ambiguity. Define the terms whistleblower, person mentioned in a report, wrongdoing, detrimental conduct, retaliation, report, reporting channel, and whistleblowing management system as the standard uses them, and contrast each with the looser everyday meaning the word carries in news media. Examine why ISO often prefers the neutral term reporter rather than the more loaded label whistleblower, why detrimental conduct is preferred over retaliation in formal documentation, and how the term wrongdoing is broader than illegality and covers conduct that is unethical, unsafe, or contrary to the organisation’s own policies and values. The learner will leave with a working glossary that prevents the most common drafting and training mistakes seen across compliance programmes.
ISO 37002 in the Management Systems Family9:18
This lecture positions ISO 37002:2021 within the broader family of governance and compliance management system standards so the learner can integrate it efficiently rather than build an isolated silo. Examine the relationship with ISO 37301:2021 compliance management systems, ISO 37001:2016 anti-bribery management systems, ISO 37000:2021 governance of organisations, and ISO 31000:2018 risk management, showing where a whistleblowing channel feeds intelligence into each of them. Explore how an organisation that already operates an ISO 37301 compliance programme can extend it with ISO 37002 rather than duplicating documentation, and how the Harmonized Structure makes shared elements such as leadership commitment, internal audit, management review, and continual improvement reusable across all four standards. The learner will see how to position ISO 37002 in an integrated governance, risk, and compliance architecture.
Section 1 Quiz: Foundations of ISO 37002:2021
Roleplay: Foundations of ISO 37002:2021

Context of the Organization (Clause 4)7:17
This lecture walks through Clause 4 of ISO 37002:2021, which requires the organisation to understand its internal and external context before designing a whistleblowing management system. Examine how to identify external issues including applicable whistleblower protection laws, regulator expectations, industry norms, and stakeholder pressure, and how to identify internal issues such as organisational culture, prior incidents, workforce composition, working languages, and existing reporting mechanisms. Explore Clause 4.2 on understanding the needs and expectations of interested parties including workers, contractors, suppliers, customers, regulators, investors, and the public, and Clause 4.3 on defining the scope of the system, including whether it covers only employees or extends to the wider value chain. The learner will see why a well-scoped context analysis is the foundation that everything else in the standard ultimately depends on for credibility.
Leadership Commitment and the Top Management Role7:28
This lecture covers Clause 5.1 of ISO 37002:2021, which makes the active engagement of top management non-negotiable for a credible whistleblowing management system. Examine the specific commitments top management must demonstrate, including assigning sufficient resources, ensuring the policy is communicated and understood, integrating the system into business processes, promoting a speak-up culture, supporting the whistleblowing function with operational independence, and personally modelling the expected behaviour at every level. Explore why a system that is delegated entirely to compliance or human resources without visible board-level support tends to fail, what the standard expects boards and audit committees to do, and how leadership tone, body language, and consistency between word and action shape whether workers believe the channels are safe to use when they matter most.
The Whistleblowing Policy (Clause 5.2)9:03
This lecture examines Clause 5.2 of ISO 37002:2021 on the whistleblowing policy, the central public document that signals the organisation’s commitment and sets expectations for everyone. Explore the elements the policy must include, such as the scope of reportable wrongdoing, the available reporting channels, the prohibition against detrimental conduct, the confidentiality and anonymity options, the way reports will be received and processed, the protections for persons mentioned in reports, and the disciplinary consequences for retaliation or knowingly false reports made in bad faith. Examine drafting choices that affect credibility, such as whether the policy is signed by the chief executive, whether it is available in every language spoken across the workforce, whether it sits in plain prose rather than legalese, and whether it links to operating procedures without burying readers in detail.
Roles, Responsibilities, and the Whistleblowing Function8:28
This lecture covers Clause 5.3 of ISO 37002:2021 on roles, responsibilities, and authorities, with particular focus on the whistleblowing function — the people or unit operationally responsible for running the system day to day. Examine the qualities the standard expects of the whistleblowing function, including competence, impartiality, operational independence from the activities being reported on, direct reporting access to top management or the board, and sufficient authority to investigate without interference. Explore the distinction between governance roles held by the board or audit committee, oversight roles held by senior management, operational roles held by the whistleblowing function itself, and supporting roles played by human resources, legal, internal audit, security, and external investigators. The learner will leave able to draft a clear responsibility assignment matrix for any organisation.
Risk-Based Planning and Objectives (Clause 6)6:54
This lecture walks through Clause 6 of ISO 37002:2021, which applies risk-based thinking to the design and continual development of the whistleblowing management system. Examine Clause 6.1 on actions to address risks and opportunities — identifying threats such as channel non-use, leakage of reporter identity, biased investigation, regulator action, and litigation, alongside opportunities such as early detection of fraud, stronger ethical culture, and competitive trust advantage. Explore Clause 6.2 on setting whistleblowing objectives that are measurable, monitored, communicated, and updated, and Clause 6.3 on planning changes to the system in a controlled way that preserves integrity. The learner will see how to translate abstract principles into a concrete annual plan with clear owners, targets, milestones, and review cadence that boards can hold accountable across reporting cycles.
Resources, Competence, and Awareness (Clauses 7.1-7.3)8:04
This lecture covers the first half of Clause 7 of ISO 37002:2021 on support, including the resources, competence, and awareness required for an effective whistleblowing management system. Examine Clause 7.1 on the financial, human, technological, and infrastructure resources needed to run secure reporting channels and conduct fair investigations, Clause 7.2 on the competence requirements for the whistleblowing function — including training in investigative interviewing, evidence handling, psychological safety, data protection, and applicable law — and Clause 7.3 on the awareness all workers must have of the policy, the channels available, their rights and protections, and the prohibition against retaliation. Explore practical training delivery methods including induction, periodic refreshers, role-specific training for managers, and targeted awareness campaigns for high-risk functions such as procurement and finance.
Communication and Documented Information (Clauses 7.4-7.5)9:12
This lecture completes Clause 7 of ISO 37002:2021 by examining communication and documented information requirements that hold the system together. Explore Clause 7.4 on internal and external communication — what the organisation must communicate about the whistleblowing system, to whom, when, and through which channels, including communication to suppliers, contractors, joint venture partners, and the general public. Examine Clause 7.5 on documented information, including which procedures, records, and evidence must be created, controlled, retained, protected from unauthorised access, and disposed of in line with applicable data protection law such as the EU General Data Protection Regulation. Explore the tension between transparency that builds trust and confidentiality that protects reporters and accused persons, and how mature organisations resolve it through tiered access controls and pseudonymised case reporting.
Section 2 Quiz: Designing the Whistleblowing Management System
Roleplay: Designing the Whistleblowing Management System

Operational Planning for Report Handling (Clause 8.1)9:43
This lecture introduces Clause 8.1 of ISO 37002:2021 on operational planning and control, which requires the organisation to plan, implement, and control the processes needed to handle reports of wrongdoing consistently and fairly. Examine how the standard frames report handling as a four-stage lifecycle — receiving, assessing, addressing, and concluding — and how each stage must be planned with criteria, controls, and documented information before the first serious report ever arrives. Explore the role of standard operating procedures, case management systems, escalation rules, conflict of interest checks, timing targets, and quality controls, as well as the requirement to control externally provided processes such as outsourced hotlines and external investigators. The learner will see why preparation, not improvisation, is what separates credible systems from those that collapse under the weight of their first serious case.
Receiving Reports — Channels, Accessibility, Confidentiality (Clause 8.2)7:26
This lecture dives deeply into Clause 8.2 of ISO 37002:2021 on receiving reports of wrongdoing, which is the front door of the entire system and the moment when trust is won or lost. Examine the requirement to offer multiple reporting channels including written, oral, face-to-face, and digital options, and to make them accessible regardless of language, geography, disability, or working pattern. Explore the trade-offs between named and anonymous reporting, the role of third-party hotline providers, the secure handling of sensitive personal data under regulations such as the EU General Data Protection Regulation, and the obligation to acknowledge receipt of a report within a defined timeframe such as the seven days required by Directive 2019/1937. The learner will leave able to design a channel architecture that maximises usability while preserving confidentiality and chain of custody.
Assessing Reports — Triage, Initial Review, and Prioritization (Clause 8.3)9:45
This lecture covers Clause 8.3 of ISO 37002:2021 on assessing reports of wrongdoing, the critical bridge between receipt and action. Examine the triage step that determines whether the matter falls within the scope of the whistleblowing system or should be redirected to grievance, customer complaint, or other channels, the initial assessment that gauges credibility, severity, urgency, and potential harm to people and assets, and the prioritisation that allocates investigative resources accordingly. Explore the role of conflict of interest checks at this stage, the interim protective measures that may be needed before a full investigation begins such as preserving evidence and protecting the reporter, and the documented information that must accompany every assessment decision. The learner will see why a disciplined assessment process prevents both panicked overreaction and dangerous neglect of serious matters.
Addressing Reports — Investigation and Resolution (Clause 8.4)9:49
This lecture examines Clause 8.4 of ISO 37002:2021 on addressing reports of wrongdoing, which covers the investigation and resolution of substantiated concerns. Explore the planning of an investigation including formal terms of reference, lead investigator selection, scope, methodology, and timeline, the conduct of interviews of reporters, witnesses, and persons mentioned in reports with appropriate due process, the gathering and preservation of digital and physical evidence under chain of custody discipline, and the analysis and findings that determine whether wrongdoing occurred on the balance of probabilities. Examine the resolution options available including disciplinary action, process change, remediation of harm, restitution, referral to regulators or law enforcement, and the standard’s clear emphasis on proportionate and fair outcomes. The learner will leave understanding what a defensible investigation looks like from start to finish.
Concluding Reports — Outcomes, Documentation, Lessons Learned (Clause 8.5)9:58
This lecture covers Clause 8.5 of ISO 37002:2021 on concluding reports of wrongdoing, the stage where the case is formally closed and lasting value is captured for the future. Examine the communication of outcomes to the reporter, to the person mentioned in the report, and to other stakeholders such as regulators, audit committees, and external auditors, balancing transparency with confidentiality and legal constraints such as data protection. Explore the documented information that must be retained for the closed case including the chain of decisions, evidence, communications, and resolution actions, and the lessons-learned process that converts each case into improvements to the policy, controls, training, technology, or culture of the organisation. The learner will see why closure is not the end of the case but the beginning of organisational learning and systemic strengthening.
Protecting Whistleblowers from Detrimental Conduct8:24
This lecture focuses on one of the most legally and ethically sensitive aspects of ISO 37002:2021 — the protection of whistleblowers from detrimental conduct, which the standard treats as a foundational obligation woven through every clause. Examine what counts as detrimental conduct including dismissal, demotion, transfer, denial of promotion, harassment, ostracism, negative performance reviews, and threats against family, career, or reputation, and the standard’s position that protection extends from the moment a person considers making a report rather than only after the report has been formally received. Explore the anonymity options that organisations must consider, the burden-shifting provisions in laws such as the EU Whistleblowing Directive that complement ISO guidance, and the practical controls — monitoring of employment actions after a report, mandatory escalation of adverse actions, and remediation when detrimental conduct is found — that make protection real rather than rhetorical.
Protecting Persons Mentioned in Reports and Due Process8:17
This lecture covers a frequently overlooked but essential element of ISO 37002:2021 — the protection of persons mentioned in reports, sometimes called the subject of the report. Examine the standard’s position that an allegation is not a finding, that the person mentioned retains the right to confidentiality, dignity, and fair process throughout the investigation, and that premature disclosure of identity, prejudgement, or suspension without cause can itself amount to detrimental conduct that exposes the organisation to legal liability. Explore the procedural safeguards that must be designed into the investigation, including the right to be informed of the substance of allegations at an appropriate point in the process, the right to respond to evidence, the right to be accompanied in interviews where applicable law allows, and the right to a reasoned written outcome. The learner will leave able to design an investigation process that is fair to everyone involved.
Section 3 Quiz: Operation — The Report Lifecycle (Clause 8)
Roleplay: Operation — The Report Lifecycle (Clause 8)

Monitoring, Measurement, and KPIs (Clause 9.1)6:16
This lecture covers Clause 9.1 of ISO 37002:2021 on monitoring, measurement, analysis, and evaluation of the whistleblowing management system. Examine the categories of indicators a mature programme tracks including volume metrics such as reports received per channel and per business unit, quality metrics such as time to acknowledge and time to close, outcome metrics such as substantiation rates and remediation completion, and trust metrics such as workforce survey results and willingness-to-report scores measured year over year. Explore the methods for collecting reliable data without compromising confidentiality, the dashboards that translate raw numbers into board-level insight, and the analytical techniques that detect concerning trends such as clusters of reports in a single business unit or a sudden drop in reporting after a leadership change. The learner will leave able to design a metrics framework that proves the programme works.
Internal Audit of the Whistleblowing Management System (Clause 9.2)9:43
This lecture examines Clause 9.2 of ISO 37002:2021 on internal audit of the whistleblowing management system. Explore the requirement for planned, independent audits that determine whether the system conforms to the organisation’s own requirements and to the guidance of the standard, and whether it is effectively implemented and maintained. Examine the auditor competence required for this sensitive area, the scope and frequency considerations, the audit programme planning, and the conduct of audit interviews with reporters and the whistleblowing function in a way that preserves confidentiality at every step. Explore the reporting of audit findings to top management and the board, the relationship with the internal audit function operating under ISO 19011 guidance on auditing management systems, and the way audit results feed corrective action and management review.
Management Review and Governance Oversight (Clause 9.3)6:34
This lecture covers Clause 9.3 of ISO 37002:2021 on management review, the periodic top-management examination of the whistleblowing management system that closes the governance loop. Examine the required inputs to the review including audit results, monitoring data, status of previous actions, trends in reports and outcomes, changes in legal and stakeholder requirements, feedback from interested parties, and identified opportunities for improvement, and the required outputs including decisions on policy, resourcing, objectives, and changes to the system. Explore the governance role of the board, audit committee, ethics committee, or equivalent body, the cadence of review at which strategic and operational visibility is maintained, and the documented information that demonstrates active oversight to regulators, certification bodies, external auditors, and other interested parties over time.
Nonconformity, Corrective Action, and Continual Improvement (Clause 10)9:28
This lecture covers Clause 10 of ISO 37002:2021 on improvement, including nonconformity and corrective action and continual improvement of the whistleblowing management system. Examine how to identify a nonconformity in the context of a guidelines standard — a gap between practice and the organisation’s own commitments, procedures, or stated objectives — and the steps required to react, control and correct the situation, evaluate the need for action, implement corrective action, review effectiveness, and update risks and opportunities accordingly. Explore the philosophy of continual improvement that the standard inherits from the Harmonized Structure used across the ISO management system family, the use of trend analysis from prior cases to drive systemic change, and the way mature organisations move from reactive correction to proactive enhancement of culture, technology, and training over multiple cycles.
Section 4 Quiz: Performance Evaluation and Continual Improvement
Roleplay: Performance Evaluation and Continual Improvement

The EU Whistleblowing Directive (Directive 2019/1937)9:03
This lecture maps ISO 37002:2021 against Directive (EU) 2019/1937 of the European Parliament and of the Council on the protection of persons who report breaches of Union law, commonly called the EU Whistleblowing Directive. Examine the directive’s material scope, which covers breaches of Union law in areas including public procurement, financial services, product safety, transport safety, environmental protection, public health, consumer protection, and protection of personal data, and the entities required to establish internal reporting channels — private entities with fifty or more workers and public sector entities, with the original transposition deadline of 17 December 2021 for those with 250 or more workers and 17 December 2023 for entities with fifty to 249 workers. Explore key obligations including secure channels, acknowledgement within seven days, feedback within three months, prohibition of retaliation with reversal of the burden of proof, and external reporting to competent authorities.
Sarbanes-Oxley Section 806 and Section 11079:56
This lecture covers the United States whistleblower protections under the Sarbanes-Oxley Act of 2002. Examine Section 806, codified at 18 U.S.C. section 1514A, which protects employees, contractors, subcontractors, and agents of publicly traded companies and their subsidiaries from retaliation for reporting conduct they reasonably believe constitutes mail, wire, bank, or securities fraud, violations of Securities and Exchange Commission rules, or any provision of federal law relating to fraud against shareholders, with administrative enforcement through the Occupational Safety and Health Administration and de novo review in federal district court if the agency does not issue a final decision within 180 days. Explore Section 1107, codified at 18 U.S.C. section 1513(e), which creates a criminal offence punishable by up to ten years imprisonment for knowingly retaliating against a person who provides truthful information to a law enforcement officer about a federal offence.
Dodd-Frank Section 922 and the SEC Whistleblower Program9:36
This lecture covers Section 922 of the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010, which created the United States Securities and Exchange Commission Whistleblower Program codified primarily at 15 U.S.C. section 78u-6. Examine the financial award framework, under which whistleblowers who voluntarily provide original information leading to a successful enforcement action with monetary sanctions exceeding one million dollars are entitled to receive between ten percent and thirty percent of the sanctions collected, and the anti-retaliation provisions that allow direct federal court action with double back pay and reinstatement. Explore the parallel Commodity Futures Trading Commission whistleblower programme under 7 U.S.C. section 26 and the Internal Revenue Service whistleblower programme under 26 U.S.C. section 7623, and the tension and complementarity between external bounty programmes and ISO 37002-aligned internal channels that try to keep reports inside the organisation.
Other Whistleblower Frameworks Around the World10:06
This lecture surveys whistleblower protection frameworks beyond the European Union and the United States that any global organisation implementing ISO 37002:2021 should understand. Examine the United Kingdom Public Interest Disclosure Act 1998 as inserted into the Employment Rights Act 1996, the Australian Treasury Laws Amendment Enhancing Whistleblower Protections Act 2019 alongside the Public Interest Disclosure Act 2013 for the federal public sector, the Canadian Public Servants Disclosure Protection Act, the Japanese Whistleblower Protection Act revised in 2020, the French Sapin II law of 2016 as updated by the Waserman law of 2022, the German Hinweisgeberschutzgesetz transposing the EU directive, and the growing patchwork across Latin America and Asia. Explore the recurring themes such as channel obligations, anti-retaliation rules, and timeframes alongside the local variations that demand jurisdiction-specific configuration on top of an ISO 37002 baseline.
Building a Unified Multi-Jurisdiction Whistleblowing Program10:44
This lecture brings everything together by showing how to build a single whistleblowing programme that satisfies ISO 37002:2021 and the patchwork of national laws that an international organisation must navigate at the same time. Examine the governance architecture that allocates global policy ownership at headquarters while permitting national supplements that meet local mandatory rules on language, channels, data residency, and works council consultation. Explore the technology architecture including global case management platforms with role-based access and data segregation, the training architecture that combines a global core curriculum with local legal modules, and the metrics architecture that consolidates board-level dashboards without breaching jurisdictional confidentiality rules or transferring personal data unlawfully across borders. The learner will leave with a concrete blueprint for a programme that is consistent enough to be auditable and flexible enough to be lawful everywhere it operates.
Section 5 Quiz: The Global Regulatory Landscape
Roleplay: The Global Regulatory Landscape

Requirements

Basic familiarity with corporate governance, compliance, or human resources concepts
General awareness that whistleblowing or speak-up hotlines exist inside organisations
Comfort reading formal policy or regulatory text in English
No prior knowledge of ISO management system standards is required, as all relevant terms are explained from scratch
Access to your own organisation’s existing policies is helpful but not mandatory

Description

This course contains the use of artificial intelligence.

Whistleblowers detect the wrongdoing that audits, internal controls, and external regulators routinely miss, yet for decades they have been mistreated, ignored, or destroyed by the very organisations that should have thanked them. The arrival of ISO 37002:2021 changed that conversation by giving the world a single, authoritative guideline for building a whistleblowing management system that any organisation, in any sector, in any country, can adopt with confidence. Combined with the EU Whistleblowing Directive, Sarbanes-Oxley, and Dodd-Frank, it has become impossible to run a credible compliance function in the modern enterprise without mastering this standard from end to end.

This course delivers complete, clause-by-clause coverage of ISO 37002:2021 across twenty-eight focused lectures. You will study the four guiding principles of trust, impartiality, protection, and accessibility, design the policy and governance structure of a whistleblowing function, and work through the four-stage report lifecycle in depth — receiving reports through accessible and confidential channels, assessing them through disciplined triage and prioritisation, addressing them through fair and defensible investigation, and concluding them with proper communication, documentation, and lessons learned. You will examine the protection of whistleblowers and persons mentioned in reports, the measurement, internal audit, and management review of the system, and the corrective action cycle that drives continual improvement over time.

The course is built for ethics and compliance officers, whistleblowing programme managers, human resources professionals, internal auditors, risk managers, in-house counsel, board members, and consultants who must design, run, audit, or oversee a whistleblowing management system. By the end you will be able to draft a compliant policy, build a multi-channel reporting architecture, run a defensible investigation, and align your programme with the EU Whistleblowing Directive 2019/1937, Sarbanes-Oxley Section 806, Dodd-Frank Section 922, and other national frameworks at the same time without duplicating work.

What makes this course different is its uncompromising fidelity to the standard combined with practical depth and global regulatory context in every lecture. Every section is structured around official clauses, principles, and recognised legal frameworks, with no fluff and no guesswork left for the learner to fill in. Enrol today, and turn ISO 37002 from a document on your shelf into the working blueprint of an internal reporting programme that protects your people, your stakeholders, and your organisation for the long term.

Who this course is for:

Ethics and compliance officers responsible for whistleblowing or speak-up programmes
Whistleblowing programme managers and operators of internal reporting channels
Human resources professionals handling reports, investigations, or retaliation complaints
Internal auditors, risk managers, and consultants assessing or designing whistleblowing systems
In-house counsel, board members, and senior executives accountable for ethical conduct and regulatory compliance

ISO 37002:2021 Whistleblowing Management Systems

What you'll learn

Explore related topics

Course content

Section 1: Foundations of ISO 37002:20216 lectures • 43min

Section 2: Designing the Whistleblowing Management System8 lectures • 56min

Section 3: Operation — The Report Lifecycle (Clause 8)8 lectures • 1hr 3min

Section 4: Performance Evaluation and Continual Improvement5 lectures • 32min

Section 5: The Global Regulatory Landscape6 lectures • 49min

Foundation of Whistleblowing Management Systems0

System Design and Infrastructure Requirements0

Policy Development and Documentation0

Implementation Planning and Change Management0

Report Intake and Initial Processing0

Requirements

Description

Who this course is for: