The Whistleblower Who Skipped the Line
You are the company secretary of a mid-sized logistics firm. A junior finance analyst emails you directly, bypassing her manager and the head of internal audit, alleging that the CFO has been capitalising maintenance costs to flatter EBITDA ahead of a bank covenant test. She has attached two screenshots of journal entries but no source documents. She asks for confidentiality and says she will resign if her name is disclosed. The CFO is also the person who signs off on the firm's code of conduct training, and the audit committee chair is a close personal friend of the CFO. The next covenant test is in six weeks. Your CEO asks you to 'handle it quietly and not embarrass anyone.'
1. What are the immediate ethical and governance obligations, and how should you sequence your actions over the next 72 hours?
Read the worked answer
Obligations in tension: (1) duty to investigate a credible fraud allegation, (2) duty to protect the reporter from retaliation, (3) duty to preserve evidence, (4) duty of confidentiality to the company, and (5) the CEO's instruction, which is a pressure, not an authority - the CEO cannot override the audit committee's oversight of financial reporting.
Sequencing:
- Acknowledge and protect (day 1). Confirm to the analyst in writing that retaliation is prohibited and that you will not disclose her identity without legal necessity. Do not promise absolute secrecy you cannot guarantee; promise best efforts and explain the limited exceptions (legal compulsion, need-to-know investigation).
- Preserve evidence (day 1). Issue a litigation-hold-style instruction to IT to preserve the relevant journals, approvals and emails. Do not delete or 'tidy' anything.
- Escalate to the right body (day 1–2). The CFO is the subject; the audit committee chair is conflicted. Escalate to the audit committee as a body, flagging the chair's relationship and asking that a non-conflicted member lead. If the whole committee is conflicted, escalate to the board or external counsel.
- Do not confront the CFO before evidence is secured.
- Document every step, including the CEO's instruction, verbatim.
The 'quiet' handling the CEO wants is incompatible with the allegation's gravity. Say so plainly and in writing.
2. The CEO repeats the request to keep it informal. How do you respond, and what do you record?
Read the worked answer
Respond in a short, factual memo (or follow-up email) that:
- restates the allegation in neutral terms;
- notes that capitalisation of maintenance costs is an accounting-policy and possibly fraud matter within the audit committee's remit;
- records that you have escalated and preserved evidence;
- states that you cannot agree to informal handling because it would expose the company and the CEO personally to accusations of concealment.
Record: date, time, attendees, the CEO's exact words, your response, and the escalation trail. Send the CEO a copy so there is a contemporaneous, shared record. This is not disloyalty - it is the documentation that protects everyone if the matter later surfaces.
Judgement point: the exam rewards recognising that 'handle it quietly' is a red flag, not a reasonable management preference, once a credible fraud allegation exists.