An employee anonymously reports that your company has been paying bribes to win business in a former Soviet republic. Or maybe the employee reports that the company has been defrauding a customer for years. In either situation, what will you do?

Of course you will take the report seriously and investigate it thoroughly. You will preserve documents and data, conduct interviews and, at an appropriate time, report to the board and executive management. You might decide to self-report to government regulators, and to cooperate fully with the government’s investigation.