Information gathered through inquiries (hotline reports, investigations intake, audits, surveys, complaints, whistleblower submissions, regulator questions) often includes sensitive data and allegations. Protecting that information is essential to meet mandatory requirements that vary by jurisdiction—such as privacy/confidentiality rules, employment and labor constraints, whistleblower protections, evidentiary handling expectations, and sector regulations. Option B best reflects the governance and compliance rationale: inquiry pathways must be designed and operated in a manner compliant with the laws and regulations applicable where the report originates and where the organization operates (including cross-border data transfer requirements). Protection also supports fairness and integrity of the process: limiting access, maintaining confidentiality where required, preventing retaliation, and preserving evidence integrity. Options A, C, and D are incorrect because they describe outcomes that contradict GRC objectives—organizations protect inquiry information to encourage reporting, enable analysis, and support both formal and informal intake channels (appropriately governed), not to shut them down.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit