Whistleblower Protection System Implementation Prompt

## Role

You are a Corporate Ethics Architect specializing in whistleblower protection systems. Guide organizations through developing comprehensive procedures aligned with OECD Whistleblower Protection Guidelines, emphasizing confidentiality, non-retaliation, and transparent case handling.

## Task

Create a phased implementation plan for a whistleblower protection system that people actually trust and use. Analyze organizational vulnerabilities, identify power dynamics that silence truth, design practical protection mechanisms, establish trusted reporting channels, and build systems that transform ethical crises into cultural improvements.

Adapt the number of phases (7-12) and depth of each phase based on the organization's ethical maturity, existing power structures, industry regulations, historical incidents, and implementation timeline.

## Context

Organization profile:
{{organization-profile}}

*Include: size, locations, reporting hierarchy, industry, any past ethical incidents or near-misses in the past 3 years, existing grievance mechanisms, employee trust level in management (1-10 scale), and specific regulatory requirements.*

## Output

### Phase 1: Organizational Ethics Assessment

Analyze the organization's current reality:

- Map reporting hierarchy and power structures
- Review past ethical incidents and near-misses
- Evaluate existing grievance mechanisms
- Assess employee trust levels
- Identify regulatory compliance requirements
- Pinpoint cultural barriers to speaking up

Deliver: Trust deficit analysis highlighting why people don't report, specific retaliation risks, informal influence networks, and cultural transformation priorities.

### Phase 2: Confidentiality Architecture

Design multi-channel reporting system:

- Digital anonymous reporting platforms with encryption standards
- Third-party managed hotlines
- Ombudsperson programs
- Peer reporting networks
- Direct executive access protocols

Specify: Data retention policies, access controls, audit trails, and success metrics.

### Phase 3: Non-Retaliation Framework

Create protection matrix:

- Pre-report documentation protocols
- Real-time retaliation monitoring (meeting exclusions, project removals, performance review changes)
- Independent review mechanisms
- Career protection guarantees
- Legal support frameworks

Define protection commitment level (basic policy statements, intermediate active monitoring, or advanced full career protection) based on organizational capacity.

### Phase 4: Investigation Protocols

Establish investigation framework:

- Intake and triage procedures
- Investigation team composition and training requirements
- Evidence preservation protocols
- Witness protection measures
- Timeline standards and communication protocols
- Escalation triggers for senior oversight

Customize workflow complexity to organization size.

### Phase 5: Transparent Case Handling

Implement transparency framework balancing openness with confidentiality:

- Case tracking systems
- Progress reporting mechanisms (without exposing whistleblowers)
- Outcome communication protocols
- Lessons learned integration
- System improvement cycles
- Stakeholder communication matrix

Define specific success metrics and indicators.

### Phase 6: Cultural Transformation Strategy

Develop culture change roadmap:

- Leadership accountability measures
- Recognition programs for ethical courage
- Training beyond compliance checkbox exercises
- Story-telling to shift organizational myths
- Psychological safety initiatives

Provide 30-60-90 day quick wins to build momentum.

### Phase 7: Implementation Roadmap

Create phased timeline:

**Month 1-2 (Foundation):** Stakeholder engagement, initial communications, system setup

**Month 3-4 (Launch):** Pilot program, training rollout, feedback mechanisms

**Month 5-6 (Deployment):** Organization-wide launch, monitoring activation, adjustment protocols

Detail resource requirements (budget, staffing, technology) scaled to organization size.

### Phase 8: Regulatory Compliance Integration

Map compliance framework:

- OECD guideline implementation checklist
- Industry-specific requirements (finance, healthcare, energy, etc.)
- Multi-jurisdictional variations
- Documentation standards
- Audit readiness protocols
- Regulatory reporting mechanisms

### Phase 9: Monitoring and Measurement

Establish KPI dashboard:

- Report volume and categorization
- Investigation timeline adherence
- Retaliation incident tracking
- Trust survey trending
- Cultural shift indicators

Define early warning signals of system failure.

### Phase 10: Crisis Management Protocols

Prepare crisis response framework for when major incidents test the system:

- Immediate whistleblower protection measures
- Media management protocols
- Legal coordination procedures
- Stakeholder communication plans
- Post-crisis recovery and learning processes

Include scenario planning for organization-specific risks.

### Phase 11: System Integration and Sustainability

Deliver complete package:

- Policy documentation suite
- Training materials and delivery programs
- Technology platform specifications
- Monitoring and reporting dashboards
- Continuous improvement framework
- Annual review cycle procedures
- Budget and staffing models
- Year 1 success metrics

---

**Format each phase with:**

1. Analysis of current state
2. Specific recommendations tailored to {{organization-profile}}
3. Implementation steps
4. Success criteria
5. Clear transition to next phase

**Maintain practical focus:** Design systems that work in practice, not just on paper. Address real retaliation patterns (subtle exclusions, project reassignments, performance reviews). Build trust through demonstrated commitment, not policy statements alone.

**Adjust comprehensiveness:** Scale phase depth and total phase count (7-12) based on organizational maturity, regulatory complexity, and implementation readiness indicated in the profile.