Why Are Whistleblower Cases So Easy to Botch?
Three parties can be destroyed by mishandling: the source (exposed and retaliated against), the accused (convicted by rumour before facts) and the company (regulatory exposure when a genuine disclosure is buried). The most common failure is amateur handling in the first week, forwarding the complaint widely, questioning the obvious suspects and letting the subject learn everything before evidence is secured.
What Does a Defensible Protocol Look Like?
The sequence that survives board and regulatory scrutiny:
- Contain: need-to-know circle of two or three; the complaint itself is evidence, preserve it
- Assess: is the allegation specific, plausible and testable? Anonymous does not mean unreliable
- Preserve: quietly secure the records, systems and CCTV the allegation implicates, before anyone is interviewed
- Investigate independently: external investigators where the allegation touches management, internal teams cannot credibly probe their own chain
- Close formally: documented findings, action taken and source protection maintained to the end
When Must the Investigation Be External?
Whenever the allegation reaches anyone with power over the investigators (senior management, promoters, audit committee members) or where findings may end up before regulators or courts. Independence is not a luxury there; it is what makes the findings usable. Garuda conducts such inquiries reporting directly to boards and audit committees.