A Reporting Channel Is Not a Speaking-Up Culture

An organisation can display a whistleblowing policy, commission an anonymous portal and train managers to repeat the word integrity while still making it practically unsafe to tell the truth. A report may be received yet fragmented among legal, human-resources, risk and operational teams. Each office sees a manageable issue; nobody sees the institutional danger. The governing body learns only after a journalist, regulator, court or client makes the evidence impossible to contain.

A reporting channel is infrastructure. A speaking-up culture is the pattern of authority, protection, investigation, information and consequence that determines what happens after a person uses it. The distinction matters because a silent organisation may be healthy, or it may have taught people that speaking changes nothing except the speaker's future.

Values-based leadership should ask a harder question than whether a mechanism exists: can an unwelcome warning travel from the person who sees it to an authority capable of acting, without being diluted, retaliated against or converted into a narrower problem that protects the institution from seeing itself?

On 22 October 2026, Australia's Department of Finance published an independent review of KPMG Australia's response to a whistleblower disclosure. The review had been provided to the department on 14 October. It concluded that KPMG's response was misguided, fragmented and prolonged, with no clear ownership and no person, function or body receiving a timely, complete…