Somo 1Majukumu ya watekelezaji na muundo wa utawala: afisa wa kuripoti wa ndani, naibu, Sheria, HR na majukumu ya mtoa huduma wa njeSehemu hii inafafanua muundo wa utawala na majukumu ya watekelezaji. Inafafanua wajibu wa maafisa wa kuripoti wa ndani, naibu, Sheria, HR, na watoa huduma wa nje, na inaelezea njia za ongezeko, kinga za uhuru, na mipango ya cheche.
Mandate of the internal reporting officerDeputy arrangements and business continuityInterfaces with Legal, HR, and ComplianceUse of external ombuds or hotline providersIndependence, conflicts, and reporting linesSomo 2Uchora wa michakato: kupokea, uchambuzi, tathmini ya awali, uchunguzi rasmi, hatua ya marekebisho, kufungaSehemu hii inaelezea jinsi ya kuchora michakato ya kuripoti ya mwisho hadi mwisho, kutoka kupokea hadi kufunga. Inafafanua uchambuzi, tathmini ya awali, uchunguzi rasmi, hatua za marekebisho, na hati, ikihakikisha uwazi wa majukumu, ratiba, na pointi za maamuzi.
Designing the intake and registration stepsTriage rules and risk-based prioritizationPreliminary assessment and scopingFormal investigation workflow and controlsCorrective action, closure, and lessons learnedSomo 3Udhibiti wa ufikiaji na ruhusa zinazotegemea jukumu kwa mifumo ya kupokea, uchunguzi, na kuhifadhiSehemu hii inafafanua dhana za udhibiti wa ufikiaji kwa mifumo ya kuripoti. Inashughulikia ruhusa zinazotegemea jukumu, kutenganisha majukumu, haki ndogo, na kuhifadhi salama, ikihakikisha kuwa wafanyakazi walioidhinishwa pekee wanaweza kuona, kuhariri, au kusafirisha data nyeti ya kesi.
Role design for intake and investigation teamsLeast privilege and need-to-know principlesSegregation of duties and conflict checksAccess reviews and recertification cyclesSecure archive access and export controlsSomo 4Hatua za kiufundi na za shirika kwa usiri: usimbu fiche, pseudonymisation, magunia ya ukaguzi, ratiba za uhifadhiSehemu hii inaelezea hatua za kiufundi na za shirika kwa usiri, ikijumuisha usimbu fiche, pseudonymisation, udhibiti wa ufikiaji, kuingia magunia, na uhifadhi. Inahusisha hatua hizi na mahitaji ya kisheria, tathmini za hatari, na sera za usalama wa ndani.
End-to-end encryption for reporting channelsPseudonymisation and data minimization rulesSecure storage, backups, and key managementAudit logging and monitoring of accessRetention schedules and secure deletionSomo 5Utawala wa ongezeko na kuripoti kwa bodi: wakati wa kuhusisha manaia wa juu, Sheria, Kamati ya Kufuata SheriaSehemu hii inaelezea kanuni za ongezeko, miundo ya utawala, na kuripoti kwa bodi. Inafafanua wakati wa kuhusisha manaia wa juu, Sheria, au miili ya Kufuata Sheria, na jinsi ya kuandika maamuzi, kulinda uhuru, na kuepuka hatari za kulipiza kisasi.
Escalation criteria and materiality thresholdsRoles of senior management in case handlingInvolvement of Legal and Compliance bodiesBoard and committee reporting formatsDocumenting escalation decisionsSomo 6Chaguo na ufafanuzi wa njia za kuripoti (fomu za kupokea mtandaoni salama, hotline ya simu, posta, ana kwa ana, barua pepe iliyotumwa)Sehemu hii inaelezea jinsi ya kuchagua na kufafanua njia za kuripoti, ikijumuisha fomu za kupokea mtandaoni salama, hotline ya simu, posta, ana kwa ana, barua pepe iliyotumwa. Inashughulikia usalama, matumizi, upatikanaji, na hati ili kuhakikisha ufikiaji unaoaminika, unaofuata sheria kwa wanaoripoti wote.
Channel mix: online, phone, postal, in-personSecurity requirements for each channel typeDesigning usable and clear intake formsDelegated email and mailbox managementBusiness continuity and fallback channelsSomo 7Tarehe za mwishili na SLA zinazolingana na HinSchG: muda wa uthibitisho, hatua za uchunguzi, maoni kwa mwanariipotiSehemu hii inalenga tarehe za mwishili na SLA zinazolingana na HinSchG. Inaelezea ratiba za uthibitisho, hatua za uchunguzi, na wajibu wa maoni, na inaonyesha jinsi ya kuzipachika katika taratibu, zana, na dashibodi za kufuatilia kwa kufuata sheria.
HinSchG timelines and legal benchmarksAcknowledgement and status update deadlinesInvestigation duration and milestone trackingFeedback obligations to the reporterMonitoring SLA breaches and remediationSomo 8Mahitaji ya lugha nyingi na upatikanaji (Kijerumani, Kiingereza, na mazingatio ya lugha ya Kijerumani-Austria; chaguo za kuripoti bila jina)Sehemu hii inashughulikia mahitaji ya lugha nyingi na upatikanaji kwa wanaoripoti. Inashughulikia matumizi ya Kijerumani na Kiingereza, tofauti za Austria, lugha rahisi, chaguo za kutofichua jina, na mipango kwa ulemavu, ikihakikisha ufikiaji sawa, salama kwa njia zote za kuripoti.
Language strategy for German and EnglishHandling Austrian-German terminologyPlain language and easy-to-read draftingAccessibility for disabilities and assistive techAnonymous and confidential reporting optionsSomo 9Tathmini ya mtoa huduma wa tatu na vifungu vya mkataba (DPA, usiri, haki za ukaguzi, SLA kwa wakati wa majibu)Sehemu hii inaongoza tathmini ya watoa huduma wa nje wa hotline au jukwaa. Inashughulikia uchunguzi wa kina, DPA, usiri, haki za ukaguzi, SLA, na kufuatilia endelevu ili kuhakikisha kufuata sheria, usalama wa data, na utoaji huduma unaoaminika.
Due diligence on hotline and platform vendorsData Processing Agreement key clausesConfidentiality and conflict-of-interest termsAudit and inspection rights in contractsSLAs for uptime and response timesSomo 10Hati za kawaida na uhifadhi wa rekodi: fomu za kupokea, barua za uthibitisho, mipango ya uchunguzi, ripoti za mwisho, vifaa vya redactionsSehemu hii inashughulikia vifaa vya lazima na rekodi katika maisha yote ya kesi. Inaelezea jinsi ya kusawazisha kupokea, uthibitisho, mipango ya uchunguzi, ripoti, na redactions ili kuhakikisha uthabiti, uwezekano wa ukaguzi, na kufuata HinSchG na GDPR.
Standardized intake and case opening formsAcknowledgement and follow-up letter templatesInvestigation planning and scoping templatesFinal report and management summary formatsRedaction standards for shared documents
