2025举报与事件管理基准报告

Table of Contents Executive Summary6 Key Findings13 01Reports per 100 Employees02Report Intake Method03Report Risk Categories and Risk Types04Anonymous vs. Named Reporting05Follow-Up Rate to Anonymous Reports06Substantiation Rate07Case Closure Time08Time Difference Between Incident and Report Date09Report Outcomes10Reporter Category11Reports by Company Ownership12Conflict of Interest Disclosures13Conclusion and Key Takeaways14Appendix132326374548576975808794100102 111About the Authors The Northstar Series is NAVEX’s curated collection of proprietary data and unparalleled analytical insights. Within this series we exploregroundbreaking analysis intersected with bespoke data, shaping strategic decision-making across the risk and compliance landscape. Introduction An efficient and trusted mechanism by whichemployees and others can anonymously orconfidentially make inquires and allegations ofsuspected or actual misconduct without fearof retaliation is the hallmark of a well-designedcompliance program. Tracking internal data to help answer thesequestions and others is critical, yet comparingthat data to the world’s largest database ofinternal reporting activity is invaluable. To help, NAVEX anonymizes the datacollected through our reporting and incidentmanagement systems every year and createsthis report to share with all organizations –not just our customers. Because we havethe world’s largest and most comprehensivedatabase of reports and outcomes, riskand compliance professionals trust ourbenchmarks to help guide decision makingand better understand how their programsstack up. This 2025 report representsdata collected from reports received incalendar year 2024, and includes a numberof new metrics. Ongoing analysis and benchmarking of globalreporting data helps organizations answercrucial questions about their internal reportingprograms, including: •How does our report volume compare to ourglobal peers?•Are employees and third parties adequatelyaware of our reporting channels?•Do our employees know whatconstitutes misconduct?•Are our investigations thorough and effective?•Is our anti-retaliation policy well understood?•Do we need to update our policies? For each benchmark included in this report,you will find: NAVEX also offers custombenchmarking reports of thisdata through GRC Insights™ •A description of the benchmark•Instructions to calculate the benchmark•The 2024 combined data for all industriesin the NAVEX database, with prior-yearcomparisons for legacy metrics•Key findings and recommendations The GRC Insights reports provide a closercut of our data by industry, company sizeand more. Visit our website or reach out toan account executive to learn more aboutthis service. This annual report is an important resourcefor organizations committed to benchmarkingand improving their program effectiveness. How we calculate ourbenchmark metrics For statistical accuracy, our analysis includes onlythose organizations that received 10 or more reportsin all of 2024. The resulting database includes4,077organizations that together received a totalof2.15million individual reports. implications of each is presented in the appendixto this report. There are no “right” outcomes in benchmarkingreporting data. By definition, a median or midpointmeans that half the organizations are higher andhalf are lower than the MRV. Where appropriatein this report, we provide what we consider to bean acceptable range of results to provide contextfor your own data. To remove the impact of outliers that might skewthe overall reporting data, we calculate eachbenchmark metric for each organization, thenidentify the median (midpoint) across the totalpopulation. The resulting value – identified in chartsthroughout this report as themedian reporting valueor MRV– allows us to create a clearer picture of whatis happening in our customers’ organizations, as wellas to provide organizations with benchmarking datathat is not skewed by organization size. Falling within the range generally indicatesan organization is on par with medians for theorganizations within our database. Fallingoutside the normal range, in either direction,is a good prompt to take a closer look at whetherthere is an issue that needs more attention fromthe organization. In some cases, we provide themeanvalue asadditional information. We also have some datapresented usingfrequencies(percentages of total).Keep in mind, frequencies have been rounded, andmay not add up to exactly 100%. All data presentedis clearly marked with the calculation methodology.A more detailed discussion of the calculationmethodology, distributions, assumptions and New to this year’s report: •Benchmarking metrics based on 143,935conflict-of-interest disclosures•Metrics by organization ownership –public, private, government and education Number of Organizations4,077 2.15 Million Number of Employees69 Million Number of Reports Top Industries: 01Retail Trade02Health Care and Social Assi