The Whistleblower Who Wasn't Heard
A healthcare provider with 6,000 staff operates a whistleblowing line run by an external provider. In the past 18 months the line received 34 reports. Of these, 29 were closed at triage by the compliance manager without investigation, on the grounds that they were "management issues" rather than regulatory concerns. The remaining five were investigated; two resulted in disciplinary action against the reporter. No report has ever been escalated to the audit committee. The compliance manager reports to the general counsel, who is also the board's nominated whistleblowing champion. Staff surveys show declining confidence in speaking up, and a recent regulator visit asked for evidence that concerns are escalated to the board. The general counsel has told the CEO that the low escalation rate shows the line is working well because most concerns are trivial.
1. Critique the general counsel's interpretation of the low escalation rate and assess the design of the whistleblowing arrangements.
Read the worked answer
The general counsel's interpretation inverts the logic. A low escalation rate combined with a high triage closure rate and no board visibility is a warning sign, not a success measure. The relevant question is not "how few concerns reached the board?" but "are concerns being assessed by someone independent of the people they concern?"
On the design:
- Triage sits with the wrong person. The compliance manager closes 85% of reports at triage on a subjective "management issue" test. Triage decisions that determine whether a concern is investigated should be reviewed by someone outside the line management chain, and the criteria should be documented.
- The champion is conflicted. The general counsel is both the nominated champion and the line manager of the person making triage decisions. That structure means concerns about the legal or executive function are unlikely to be escalated.
- No board visibility. The audit committee has never received a report. Without aggregate reporting, the board cannot know whether the arrangements work.
- Deterrent effect. Two reporters were disciplined after investigation. Whatever the merits of those cases, the visible outcome is that speaking up carries personal risk. That is consistent with the declining survey confidence.
The general counsel's claim that most concerns are trivial is untested: they were never investigated. The regulator's question is well aimed.
2. Recommend changes to the whistleblowing arrangements and explain how the audit committee should monitor them going forward.
Read the worked answer
Structural changes.
- Move triage away from the compliance manager's sole judgement. A small panel including someone independent of the executive - for example a non-executive director or an external adviser - should review closures, with written reasons.
- Separate the champion role from the general counsel. The champion should be a non-executive director with direct access to the audit committee, so concerns about the legal or executive function have a route that does not pass through them.
- Review the two disciplinary cases against reporters to confirm they were handled on their merits and not in response to the disclosure. If there is any doubt, the audit committee should commission an independent review.
- Publish a clear policy confirming that reporters will not be penalised, with defined exceptions, and communicate it to staff.
Monitoring. The audit committee should receive a standing report at each meeting covering: number of reports received, number closed at triage and why, number investigated, outcomes, time to closure, and any instances where a reporter was disciplined. Trends matter more than any single figure. The committee should also see the staff survey confidence measure alongside the case data, because a healthy line shows both reports and confidence rising, not falling.
On the regulator's request, the committee should be able to demonstrate that it receives and acts on this information, not merely that a policy exists.