Most organisations talk about whistleblower protection as if it starts and ends with legislation, policy, and a hotline. That’s necessary — but it’s not sufficient.
Most organisations still treat cyber and information security as a “technology problem” and financial crime as a “compliance problem”. That separation is increasingly artificial — and risky.