The UK Government’s proposed whistleblowing reforms raise important questions about how organisations respond to concerns. We explore the implications for insider risk, corporate investigations and board accountability, and why effective whistleblowing arrangements go beyond simply having a policy in place.
Whistleblowing is driven by a reasonable belief that serious issue such as a crime or a cover-up of malpractice is happening or likely to happen, and that exposing it serves the public interest.
The importance of being able to speak up as a whistleblower and public confidence in regulators must remain high accordingly.
Whistleblowers can play an important role in identifying insider risk, but what happens when concerns are ignored or the whistleblower becomes perceived as a threat? Dr Brian Moore explores the relationship between whistleblowing and insider risk.
Colleagues, line managers and HR are often well placed to notice a developing insider problem early. Insider threat training exists to make that more likely: helping people recognise what matters, know what to do about it, and trust the routes for reporting it. GSA designs and delivers insider risk awareness and training for every level … Insider Risk Awareness, Culture and Training
When an organisation suspects an insider incident, such as data theft, misuse of information, unauthorised access or the possibility that a trusted individual has been compromised, it needs the facts established quickly, discreetly and independently. GSA investigates suspected insider incidents, drawing on the experienced investigators and open-source intelligence capability of GSA Investigation Services, within the … Insider Threat Investigations and Response
13% of UK employees surveyed had either sold company login details to a former colleague or knew someone who had. What credential sharing reveals about workplace culture and the growing challenge of insider risk.
An insider risk management programme is the structure that turns separate controls, such as vetting, monitoring, HR processes and investigation arrangements, into something that manages risk coherently. GSA designs, builds and improves insider risk programmes from the governance level down, and advises boards on how insider risk should sit within wider enterprise risk management. Building … Insider Risk Programme and Governance
An insider threat assessment establishes what an organisation is actually exposed to; a maturity review establishes how well current arrangements address that exposure and what to prioritise. Unless the real threats are understood, neither the risk nor the appropriate response can be judged properly, which is why assessment is the natural starting point for most … Insider Risk Assessment and Diagnostics
GSA Global provides independent workplace investigation services for organisations requiring impartial fact-finding into misconduct, bullying, harassment, grievances, whistleblowing concerns and other sensitive workplace matters. External investigation is often appropriate where allegations involve senior personnel, internal teams are themselves involved in the matter, impartiality may reasonably be questioned or the organisation does not have the capacity … Workplace Investigations
Recent events highlight the importance of responding appropriately when concerns are raised. Discover why effective personnel security depends on more than security vetting, combining governance, due diligence, independent investigations and clear reporting procedures to help organisations protect people, information and reputation.
Security vetting provides valuable assurance at the point of recruitment, but trust is not static. Discover why ongoing personnel security, change-of-circumstances reviews and insider risk management are essential to protecting people, sensitive information and organisational resilience.