Back

Establish, implement, and maintain investigation procedures addressing ethics complaints.


CONTROL ID
12900
CONTROL TYPE
Investigate
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain an ethics program., CC ID: 11496

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Develop internal investigation processes to address allegations or indications of undesirable conduct, and maintain a process for responding to external inquiries and investigations. (OCEG GRC Capability Model, v. 3.0, P8.1 Establish Investigation Processes, OCEG GRC Capability Model, v 3.0)
  • The investigation processes shall be carried out independently and without conflict of interests by competent personnel. (§ 8.4 ¶ 2, ISO 37301:2021 Compliance management systems — Requirements with guidance for use, First Edition, Edition 1)
  • The investigation processes shall be carried out independently and without conflict of interests by competent personnel. (§ 8.4 ¶ 2, ISO/DIS 37301, Compliance management systems — Requirements with guidance for use, DRAFT)