CCB Whistleblower & Hotline Management 5 — Questions and Answers
Question 1: A hotline report implicates the compliance officer themselves. What is the appropriate escalation path?
- The compliance officer should self-investigate to maintain objectivity
- Route the report to the General Counsel or Audit Committee directly (Correct answer)
- Dismiss the report to protect program integrity
- Escalate to the CEO who oversees compliance
Correct answer: Route the report to the General Counsel or Audit Committee directly
When the compliance officer is implicated, the report must bypass that individual entirely and go to an independent authority such as the Audit Committee or outside legal counsel.
Question 2: Which NAVEX Global benchmark statistic is commonly used to evaluate hotline utilization?
- Reports per 1,000 employees annually (Correct answer)
- Percentage of reports that result in termination
- Cost per call to operate the hotline
- Number of repeat callers per year
Correct answer: Reports per 1,000 employees annually
Industry benchmarking organizations like NAVEX Global use reports per 1,000 employees as the standard metric to compare hotline utilization across organizations.
Question 3: What is the risk of closing a hotline investigation too quickly without thorough documentation?
- It reduces the number of future reports
- It may expose the company to claims that the investigation was inadequate if the matter later resurfaces (Correct answer)
- It improves efficiency metrics on case management dashboards
- It ensures faster reporter feedback, improving satisfaction scores
Correct answer: It may expose the company to claims that the investigation was inadequate if the matter later resurfaces
Inadequately documented investigations can be challenged later as cover-ups or as failures to take reports seriously, increasing legal and reputational risk.
Question 4: Which of the following best describes 'intake' in a hotline case management lifecycle?
- The final stage where substantiated findings are reported to the board
- The initial capture and recording of a report's core facts and reporter information (Correct answer)
- The remediation phase where disciplinary action is taken
- The trend analysis performed at the end of each fiscal year
Correct answer: The initial capture and recording of a report's core facts and reporter information
Intake is the first step in case management: capturing the allegation, reporter details (if provided), and initial facts before triage and investigation begin.
Question 5: Under EU Whistleblower Directive (2019/1937), what minimum follow-up timeline must organizations provide to reporters after acknowledging receipt of a report?
- 14 days
- 30 days
- 3 months (Correct answer)
- 6 months
Correct answer: 3 months
The EU Whistleblower Directive requires organizations to acknowledge receipt within 7 days and provide feedback on action taken within 3 months.
Question 6: A company wants to add web-based reporting to its existing telephone hotline. What is the primary compliance advantage of a web intake form?
- It eliminates the need for a third-party hotline vendor
- It allows reporters to submit detailed information asynchronously and attach documents (Correct answer)
- It automatically substantiates reports without human review
- It routes all reports to the SEC for parallel processing
Correct answer: It allows reporters to submit detailed information asynchronously and attach documents
Web-based reporting forms allow reporters to provide detailed narratives, attach supporting documents, and maintain anonymity at their own pace without time pressure.
Question 7: What is the best practice for communicating hotline program results to the workforce without compromising investigation confidentiality?
- Share full case details company-wide to demonstrate transparency
- Publish anonymized aggregate statistics on report volume, case types, and outcomes (Correct answer)
- Disclose only substantiated cases with named individuals
- Limit all communications to the board and never share with employees
Correct answer: Publish anonymized aggregate statistics on report volume, case types, and outcomes
Publishing anonymized, aggregated metrics demonstrates that reports are taken seriously and acted upon, building trust without breaching individual confidentiality.
CCB Whistleblower & Hotline Management 5
A hotline report implicates the compliance officer themselves.
What is the appropriate escalation path?