ISO 37008: The Advanced Strategies Your Organization Needs in Internal Investigations Management

ISO 37008: The Advanced Strategies Your Organization Needs in Internal Investigations Management

The ISO 37008 Standard: Internal Investigations Management, establishes the guidelines and directives to follow when conducting internal investigations related to unethical behavior. Its main objective is to act as a framework for action in each stage of the investigation, from its initiation to the final resolution in a structured, efficient, impartial, and confidential manner. The Standard also includes key elements that ensure the respect of all parties' rights, as well as the proper documentation and definition of findings. Here is a brief overview of the different elements that make up the 37008 Standard:

1. Scope and Application
   • Establishes the scope of the standard and how it can be applied to any organization, regardless of characteristics such as size, type, or sector.
2. Normative References
   • Lists other standards and documents that may provide additional guidance if necessary.
3. 3. Terms and Definitions
   • Includes a detailed list of key terms and definitions to ensure a common understanding of the concepts used in the standard, making it clear and easy to understand for all involved.
4. General Principles
   • Establishes the fundamental principles that should guide internal investigations, such as impartiality, confidentiality, and legality.
5. Investigation Management
   • Outlines the general framework for managing internal investigations, including the planning, execution, and conclusion of investigations.
   • Clearly describes the roles and responsibilities of the investigative team and its collaborators.
6. Investigation Planning
   • Details the planning of an internal investigation, including the definition of objectives, scope, and necessary resources.
   • Encompasses the development of an investigation plan that includes all the steps to be followed.
7. Investigation Execution
   • Provides guidelines on how to carry out investigation activities, including the collection and analysis of information and evidence.
   • Emphasizes the need to ensure the validity and reliability of the collected evidence.
8. Communication during the Investigation
   • Highlights the importance of effective and appropriate communication throughout the investigation process among the involved parties.
   • Describes how and when to communicate with stakeholders, including relevant details such as the protection of confidentiality.
9. Investigation Conclusion and Reporting
   • Outlines the process for concluding an investigation and preparing the final report that documents the findings and case recommendations.
   • Includes guidelines on how to draft clear, complete, and objective investigation reports.
10. Post-Investigation Follow-up
    • Details the steps to be taken after the investigation is concluded, including the implementation of recommendations and corrective measures.
    • Covers the evaluation of the investigation's effectiveness and the continuous improvement of the investigation process.
11. Documentation and Record-Keeping
    • Emphasizes the importance of maintaining proper documentation and records of all investigation activities to ensure traceability and transparency. Depending on the proper documentation of the process, the final evidence may be deemed valid or dismissed.
12. Competence and Training
    • Includes guidelines on the necessary competence and training for personnel involved in internal investigations.
    • Highlights the need for continuous training and skill development.

This standard is a fundamental tool for organizations seeking to conduct internal investigations in a systematic, professional, and ethical manner, ensuring that all situations requiring formal investigation are handled appropriately.

By implementing this Standard, organizations ensure that any potential unethical behavior is addressed fairly and efficiently, which reinforces the trust of employees, customers, suppliers, and partners.

Author: Guillermo Casal
International consultant and trainer in fraud prevention and investigation and anti-money laundering. He is a Certified Public Accountant, holds a Master's degree in Economics and Administration, and has six international certifications, including the CFE (Certified Fraud Examiner), CIA (Certified Internal Auditor), and CISA (Certified Information Systems Auditor).