ISO 37002 – Whistleblowing Management
Guidelines for establishing effective whistleblowing management systems
ISO 37002:2021 provides guidelines for establishing, implementing, and improving whistleblowing management systems. It is built on three fundamental principles: trust, impartiality, and protection.
The standard encourages reporting of wrongdoing, supports whistleblowers, and ensures reports are dealt with properly and in a timely manner. The goal is improving organizational culture and governance.
ISO 37002 is a guidance standard (Type B) and is not certifiable. Its implementation represents best practice and complements the certifiable ISO 37001 and ISO 37301 standards.
ARROW Consulting supports the development of comprehensive whistleblowing systems aligned with ISO 37002 and EU Directive 2019/1937.
Who is this for
Organizations implementing ISO 37001. Companies subject to the EU Whistleblower Protection Directive. Public entities. Businesses with 50+ employees required to have internal reporting channels.
Key Benefits
Whistleblower Protection
Structured protection for individuals reporting wrongdoing, in line with European standards.
Early Detection
Detection of wrongdoing before they escalate into serious issues.
Corporate Governance
Improvement of culture, transparency, and accountability.
EU Compliance
Alignment with Directive 2019/1937 on whistleblower protection.
Risk Reduction
Reduction of legal, financial, and regulatory risks through internal mechanisms.
Implementation Process
Needs Analysis
Assessment of existing reporting mechanisms and gap identification.
System Design
Design of reporting channels, protection policies, and investigation procedures.
Implementation & Training
System deployment and training of personnel at all levels.
Monitoring & Improvement
Continuous effectiveness evaluation and improvement based on feedback.
Frequently Asked Questions
No, ISO 37002 is a guidance standard (Type B) and is not certifiable. It is applied as best practice.
Provides technical guidelines that help comply with Directive 2019/1937 on whistleblower protection.
Trust, impartiality, and protection. They ensure the system is reliable, fair, and safe.
ISO 37001 focuses on bribery prevention, while ISO 37002 provides a framework for detecting wrongdoing through reporting. Together they create a comprehensive integrity system.
Under the EU Directive, companies with 50+ employees must have internal reporting channels.
Build a reliable whistleblowing system
Contact us for guidance on ISO 37002 implementation and EU compliance.