Whistle Blower Policy
Cyber Tec Security Ltd (“CTS”) is committed to conducting its business with honesty, integrity and transparency.
We encourage employees, contractors, partners, certification assessors and other stakeholders to report concerns about suspected wrongdoing or misconduct related to the services and certification schemes delivered by CTS.
This policy provides a mechanism for raising concerns safely and confidentially.
Purpose
The purpose of this policy is to:
- Encourage the reporting of suspected wrongdoing
- Ensure concerns are investigated appropriately
- Protect individuals who raise concerns in good faith
- Maintain the integrity of the certification schemes and services delivered by CTS
This policy aligns with the principles of the Public Interest Disclosure Act 1998.
What Can Be Reported
Whistleblowing concerns may include, but are not limited to:
- Criminal activity
- Fraud or financial misconduct
- Bribery or corruption
- Attempts to improperly influence certification outcomes
- Threats or coercion towards assessors, employees, partners or clients
- Misconduct affecting the integrity of certification schemes
- Unauthorised disclosure of confidential information
- Breaches of legal or regulatory obligations
- Actions that may compromise the security or integrity of services delivered by CTS
Certification Impartiality
Cyber Tec Security operates as a certification body and is committed to maintaining impartiality in all certification and assessment activities.
Any attempt to improperly influence certification outcomes, including pressure placed on assessors, employees, partners or clients, must be reported immediately through this whistleblowing process.
Cyber Tec Security treats such matters as serious governance issues and will investigate them in accordance with this policy.
Scope
This whistleblowing policy applies to concerns relating to:
- Certification schemes operated or delivered by CTS
- Services provided by CTS
- Activities of CTS employees, contractors, assessors or partners when acting in relation to CTS services
While we recognise that wrongdoing may occur outside these areas, CTS can only directly investigate matters connected to our services and operations.
Who Can Raise a Concern
Concerns may be raised by:
- Employees
- Directors
- Contractors
- Cyber Essentials assessors
- Clients
- Partners
- Certification scheme stakeholders (including IASME)
- Any individual who becomes aware of potential misconduct relating to CTS services
How to Raise a Concern
Concerns should be reported as soon as reasonably possible by contacting:
When submitting a report, please include as much information as possible, including:
- A description of the concern
- Relevant individuals involved
- Dates or timeframes
- Any supporting evidence
Confidentiality
CTS recognises that individuals reporting concerns may wish to remain anonymous.
Anonymous reports will be considered; however, anonymity may limit our ability to investigate the issue fully.
Where a whistleblower provides their identity, CTS will treat the information confidentially and will only disclose it where necessary for investigation or where required by law.
Protection for Whistleblowers
CTS will not tolerate retaliation against anyone who raises a concern in good faith.
Individuals who report concerns honestly and responsibly will not suffer dismissal, disciplinary action, discrimination or any other adverse treatment as a result of raising a concern.
Investigation Process
When a whistleblowing concern is received, CTS will:
- Acknowledge receipt of the concern where contact details are provided.
- Review the information and determine whether an investigation is required.
- Conduct an appropriate investigation where necessary.
- Take appropriate corrective action where wrongdoing is confirmed.
The extent and nature of the investigation will depend on the circumstances of the report.
Malicious or False Allegations
Concerns must be raised in good faith.
If a report is found to be deliberately false or malicious, CTS may take appropriate action.
Contact
All whistleblowing concerns should be submitted to: [email protected]