February 20, 2025

Whistleblower programs are essential elements of effective risk and governance frameworks, as they enable organizations to identify and address potential fraud and misconduct before they escalate into costly and damaging crises.

This whitepaper delves into the critical components and best practices for developing a robust whistleblower program, emphasizing its role in reinforcing ethical standards and protecting organizational value.

We explore the key elements of building an effective whistleblower program, drawing on best practices and guidance from the COSO/ACFE Fraud Risk Management Guide, the IIA’s 3 Lines Model and Global Internal Audit Standards, and other leading best practice guidance.

How to Build a Worldclass Whistleblower Program provides a practical roadmap for organizations seeking to enhance their governance and risk management practices through the implementation of a whistleblower program. Key components include:

  • Governance and Organizational Culture
  • The Whistleblower Process
  • Continuous Monitoring and Improvement

This paper also includes comprehensive resources, references, helpful templates, and a glossary of key terms for additional information.

Special thanks to our key contributors, who gave us their time, expertise, and insights to this paper. Their valuable input has been instrumental in shaping the content and enhancing its quality.

Matt Kelly, Founder of Radical Compliance

Elizabeth J. Folsom, MBA, CPA/CFF, CIA,CFE, CCSA, CRMA, Chief Audit Executive at Population Services International

Vasanthi Ramkumar, CPA, CGMA, CISA, FCA, Head of Internal Audit at Helen Keller International

Rebecca Mason, Senior Ethics and Compliance Investigations Manager

Download the Whitepaper

Melissa Musser, CPA, CIA, CITP, CISA

Partner and Director, Risk & Advisory Services

Mac Lillard, GRF

Mac Lillard, CPA/ABV/CITP, CIA, CFE, CISA/CRISC

Senior Manager, Risk & Advisory Services