Security and anonymity

 

  • The Whistleblower (WB) list is located in QM365, but has no shared rights with the rest of the system

  • Who has access to the Notification list?

    • Whistleblowing Administrators is a separate SharePoint rights group in QM365

      • Case managers are added here - such as HR responsible

      • These users can edit but NOT delete items

    • The Site Collection Administrator (SCA) has super rights to all functions and data in QM365 including the Notification module

    • We recommend that QM365 Admin users also retain access to the list regarding maintenance. If this is not desired, SCA can grant us this right temporarily when we request it.

Anonymity

  • The whistlblower themselves choose whether they want to provide their name, e-mail/telephone number or not

  • There is no way to track an anonymous reporter!