Our own servers in Europe · GDPR · Support in your language
ES EN CA
Let's talk

Module 4 of 7 · ISO 37301 · Clause 7

Support

Support in compliance rests on two pillars: staff knowing their obligations, and a whistleblowing channel that actually works.

Content reviewed on

Compliance training

Training tailored to each role's risk, with special attention to the highest-exposure areas.

Whistleblowing channel

An accessible, confidential channel that guarantees protection from retaliation for whoever reports.

Communication

Internal and external communication of the compliance policy and procedures, tailored to each audience.

What an auditor usually asks for

  • Compliance training by risk role
  • An operational, confidential whistleblowing channel
  • A whistleblower protection procedure
  • A compliance policy communication plan

How to cover support in Kimobox

  1. 1Log each employee's compliance training based on their risk level in the employee portal.
  2. 2Manage the whistleblowing channel with confidentiality and case traceability.
  3. 3Document the whistleblower protection procedure as a controlled policy.

Every report stays logged with confidentiality and traceability, not dependent on an email that could get lost.

See Kimobox's employee portal

Where each figure comes from

References to the official text in force. If a standard is revised, this page is updated and the review date says so.

  1. ISO 37301:2021 — Compliance management systems. Requirements with guidance for use ISO · April 2021
  2. Ley 2/2023 on the protection of persons who report regulatory breaches BOE-A-2023-4513 · 21 February 2023
  3. ISO 37001:2016 — Anti-bribery management systems ISO · 2016 ed.
← Previous Planning Next → Operation