diff --git a/controls/operations/reporting/OPS.REP.001_confidential_whistleblower_process.md b/controls/operations/reporting/OPS.REP.001_confidential_whistleblower_process.md new file mode 100644 index 000000000..9a1701c71 --- /dev/null +++ b/controls/operations/reporting/OPS.REP.001_confidential_whistleblower_process.md @@ -0,0 +1,31 @@ +--- +id: "OPS-REP-001" +category: "access/identity-management" +revision-version: 1 +revision-date: "2024-01-13" +estimate-time: "15m" +frameworks: + - name: "soc2" + sections: ["CC2.2"] +--- + +## Purpose + +It encourages and enables employees to raise serious concerns +(violations of your code of ethics or law or regulations) in order for +them to be addressed and corrected while being protected from any +retaliation. + +## Implementation + +### Google Workspace + +1. Set up an anonymous [Google + form](https://html.form.guide/google-forms/make-google-form-survey-anonymous/) + +2. Communicate the link to your employees by explaining how and why + they should use it. + +## Evidence + +- Screenshot of its communication to your employees.