MAINSYSTEMS 
1. Core Concepts and Legal Context
This video's topic is the elements of a compliance programme. By the end, you should be able to explain how the risk plan, code of conduct, training and reporting channel work together. We will connect the information available, the criterion guiding the decision and the action that must be recorded. Follow the case and compare your answer with the proposed response. An integrity programme connects risks, behaviour, controls and reporting channels. The obligation to protect whistleblowers must be assessed under national law. The prevention measures used in the examples are good practice unless identified as a specific legal obligation applicable to the organisation.
An integrity programme can bring together risk assessment, rules of conduct, training and a reporting channel. The plan identifies risks and measures; the code guides decisions; training develops appropriate behaviour; and the channel helps detect problems. This structure is a management proposal. Present an element as legally mandatory only where the applicable national provision requires it.
Apply the following rule: When the reporting person requests further feedback in writing, provide it at intervals of three months until the procedure closes, starting from the first feedback. Section 22 also requires public bodies, prescribed persons and the Commissioner to send annual information to the Minister by 1 March and publish an annual report by 31 March. These annual reporting duties do not automatically apply to every private employer. Publication must protect the identities of reporting persons and persons concerned.
2. Practical Application and National Rule
Choose a process, such as procurement, and trace it through the four elements. Locate the risk in the risk plan, the rule in the code, the example in the training and the route for reporting a concern. If a link is missing, assign a specific action. Keeping four documents in a folder does not demonstrate that people know the rules or that the controls work. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.
A fictional organisation identifies a risk of favouring suppliers. Its risk plan requires documented criteria; its code addresses conflicts; training covers declarations of interests; and its channel receives a report of a possible breach. Analysis of the case may show that the control needs strengthening. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.
3. Case Study and Key Decision Points
The exercise is as follows: An organisation has published a code, but nobody knows where to report a concern. Which connection in the programme is failing? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.
The connection between the conduct rule, communication and the channel is failing. Check that the channel is accessible, explain the procedure and confirm that people can use it, as well as keeping the documents available.
One mistake to avoid is: confusing the existence of documents with the effective operation of a programme.
Now apply the national rule to a second decision. The team presents every integrity instrument as mandatory in every country. How should the message be revised?
Distinguish what national law actually requires, the conditions for its application to the entity and the proposed good practices. The specific rule just examined must appear in the corresponding procedure. Each duty needs a source; each management choice needs a purpose, an owner and evidence of implementation.
Remember these three points. First: The programme's elements must be connected. Second: Training should explain concrete decisions. Third: Incidents can inform improvements to controls.
To apply this learning, retrieve the procedure used in your organisation or consider how you would create it. Identify one difference between that procedure and the case we have just resolved. Write down the change you would propose and the information needed to justify it. You can complete this short task in the handout accompanying the video.
The expected outcome of this unit is the ability to explain how the risk plan, code of conduct, training and reporting channel work together. Review the explained answer whenever you are unsure and keep the summary to support a future decision.
In the worksheet, connect your proposal to this video's national rule. Identify the document or platform field that would need to change and who should approve the change. If you conclude that it is good practice, explain the risk you intend to reduce. If you conclude that there is a legal duty, record its source and scope.