Communicating the code, risk plan and channel

1. Regulatory Concept & Core Standards

This video focuses on how to help people find and use organisational instruments. Follow the sequence of decisions in the example rather than simply memorising a list. Notice who is involved, what information is needed and the expected result. These points help turn the content into a practice that another person can verify. Training must help people make actual decisions. KPK guidelines define relevant integrity-plan training and familiarisation roles. Teaching methods are adapted to responsibilities, risks and accessibility.

Publication means more than placing a file in a folder. Explain purpose, location and expected action. Present the risk plan through each team's risks, the code through decisions and the channel through its user journey. Messages must match the documents and avoid unlimited promises of anonymity or protection.

Apply the following rule: Article 13 permits direct external reporting where the internal route is absent, would be ineffective, or the person believes there is a risk of retaliation. Choose the authority by the subject of the breach. KPK is not the sole authority for every matter; it also provides support and statutory protection functions. Public disclosure has separate article 18 conditions. Advice, statistical reporting and reporting a breach are different services.

2. Practical Implementation & Procedure

Choose audience-appropriate methods, use examples and check links. Align communication with actual obligations. Test whether people can find information unaided and distinguish internal from external reporting. Supplier communications should explain duties and available routes without promising unconditional protection. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

A contractor receives an inaccessible intranet link. An email was sent, but usable information was not provided. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Does sending a link demonstrate adequate information? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

No. Check whether the person can open and understand it. Provide an actually usable route and record the correct version.

One mistake to avoid is: measuring communication only by messages sent.

Now apply the national rule to a second decision. An advice page is listed as the sole recipient of every report. What is missing?

A competence check. Select the authority by the breach and article 13 external-route conditions. KPK has support and other statutory duties but is not the only competent authority. Distinguish advice, reporting and public disclosure.