ISO 37002:2021 · Whistleblowing Management · Evidence & Implementation Kit
Build a whistleblowing system people actually trust, without designing it from the standard yourself.
Every ISO 37002 element handed to you as an adopt-ready control, from receiving and assessing reports through addressing them, concluding cases and protecting whistleblowers from detriment, with the evidence the system works.
Whistleblowing-ready in a weekend, not a quarter.
Here is the honest situation. New whistleblowing laws across the EU, UK and beyond require organizations to run a proper reporting system, and ISO 37002 is the international guidance for one that works: built on trust, impartiality and protection, with four operational stages, receiving, assessing, addressing and concluding reports, and strong protection of whistleblowers from retaliation and detriment. Turning that into policy, confidential channels, an impartial process and the records, so people actually report, is real work, and a system that leaks confidentiality or allows retaliation is worse than none.
This Kit removes that build. It is every ISO 37002 element written as an adopt-ready control you personalize in a weekend, with the evidence the system works.
What you get, the moment you buy
33
Guidance as adopt-ready controls. Every ISO 37002 element, from policy and culture through the four operational stages of receiving, assessing, addressing and concluding reports, and protecting whistleblowers, written so you personalize and operate it.
33
Evidence-it-works checklists. For each element, exactly the records that show the system operates and protects, plus where whistleblowing systems fail, so you close the gap first.
1
Whistleblowing Control Matrix, pre-built. Every element in a working spreadsheet, ready to record status and evidence location across the system.
1
Gap & Readiness Assessment. Score each element and the workbook returns your readiness as a single percentage, and exactly what to fix next.
Grounded in ISO 37002:2021, built on trust, impartiality and protection, with the four operational stages and protection from detriment called out. Editable Word and Excel files.
Protection from retaliation is what makes people report
A whistleblowing system only works if people trust that reporting will not cost them. ISO 37002 puts protection from detriment and retaliation at the centre. This Kit builds that protection, the confidentiality, the anti-retaliation measures and the support, so the reports that surface wrongdoing actually come in.
What one control looks like
This is protecting and supporting the whistleblower, the element that decides whether the system is trusted. All 33 are built to this depth.
8.4.2 Protecting and supporting the whistleblower PROTECTION
Implement this
[Organization] shall protect whistleblowers who report in good faith from detrimental conduct by implementing protective measures, maintaining confidentiality of their identity, providing access to support such as advice or counselling, responding to any retaliation that occurs, and ensuring that protection is not conditional on the report being substantiated provided the whistleblower had a reasonable belief the information was true.
Practitioner note.
The reasonable-belief test, not the eventual finding, governs protection; punishing an unsubstantiated good-faith reporter destroys trust.
Evidence the system works
- Protective measures applied to individual whistleblowers
- Confidentiality safeguards maintained throughout the case
- Records of support services offered and provided
- Response records where retaliation was reported or detected
Common finding they raise: Protection is withdrawn once a report is found unsubstantiated, ignoring that good-faith reporting deserves protection regardless of outcome.
Why this is not another template pack
- The evidence is the point. A whistleblowing policy you cannot evidence is a poster. This tells you the records that show the system operates and protects, and where systems fail, for every element.
- Protection and the four stages built in. The four operational stages and the protection of whistleblowers from detriment are written into the controls, the things that make a system trusted rather than hollow.
- Built on a mapped compliance corpus, not one person's opinion, from a graph of thousands of controls across standards.
- It compounds. ISO 37002 sits alongside ISO 37301 compliance and ISO 37001 anti-bribery, so this feeds your wider governance program.
Who buys this
Organizations building or improving a whistleblowing system, often to meet EU, UK or other whistleblower-protection laws, the compliance and ethics leads who own it, and consultants standing one up. Whether it is a first system or a maturity uplift, you save weeks and walk in with the policy, channels and protection controls ready.
By the end of the weekend you will have
✓ An adopt-ready control for all 33 elements
✓ A completed whistleblowing control matrix
✓ The records that show the system works
✓ Your reporting channels and protection measures defined
✓ A readiness percentage and a fix list
✓ The common failure points designed out
Common questions
Is it really editable? Yes. Word and Excel files you own and adapt. No portal, no subscription.
Does it help meet whistleblower laws? It builds a whistleblowing management system to the ISO 37002 guidance, which supports compliance with EU, UK and other whistleblower-protection laws. Confirm specific legal requirements with counsel.
Does it cover protection from retaliation? Yes. Protecting and supporting the whistleblower and addressing detrimental conduct are their own controls, because protection is what makes the system trusted.
Does it cover anonymous reporting? Yes. Confidential and anonymous reporting channels and their handling are built into the receiving and support controls.
What if it is not for me? A 30-day money-back guarantee.
Do not build a whistleblowing system people will not trust.
Every ISO 37002 element is fast to adopt with the Kit. It is instant, and it is guaranteed.
Add it to your cart and build your whistleblowing system this weekend.
Instant digital download · 30-day money-back guarantee · The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001 · support@theartofservice.com
