SEC Whistleblower Program Compliance: Why Waiting Is No Longer a Defense | GERC Ep. 2

The SEC whistleblower program paid out record bounties last year. The DOJ is pursuing antitrust enforcement before formal guidance is settled. If your compliance programme is still waiting for regulatory clarity, you are not managing risk. You are creating it. Organisations that treat "wait and see" as a compliance strategy are accumulating liability, with a statute of limitations that does not pause while they deliberate. Regulatory uncertainty is no longer a credible defence, and enforcement agencies are not waiting for rules to be finalised before they act. Host Jan Stappers, EVP GRC Solutions Strategy at Mitratech, is joined by Mary Inman, Partner at Constantine Cannon and the attorney behind whistleblowers at Theranos, Facebook, and Boeing, for a direct conversation on what proactive whistleblower programme compliance actually requires today. What this session covers: Why enforcement moves faster than guidance The SEC and DOJ routinely act before formal regulatory frameworks are settled. Organisations waiting for enforcement trends to crystallise risk becoming the test case for a new fraud or compliance issue. The practical standard is not what regulators will eventually clarify. It is what the law requires now and where the specific risks in your industry already exist. The 80% problem Research shows approximately 80% of successful whistleblowers report internally first. When organisations fail to listen, those individuals go to external regulators. The financial, legal, and reputational cost of that escalation consistently exceeds the cost of acting on the internal report. Ignoring internal reports is not a neutral decision. It is an active liability. Collective whistleblowing and AI washing Platforms such as PSST.org are collectivising whistleblowing, allowing individuals with only one piece of a puzzle to report safely alongside others. This model makes the source of external reports far less predictable for both companies and regulators. On AI specifically, formal regulatory guidance remains limited, yet AI washing and related misrepresentation risks are already attracting enforcement attention. The absence of a rule is not the absence of a risk. Monday morning actions Practical steps for building a culture where employees report internally rather than escalating directly to regulators, including how to train leadership and managers to respond when concerns are raised, how to identify early warning signs, and how to avoid retaliatory behaviour that creates a chilling effect on future reporting. Speakers: Jan Stappers, EVP GRC Solutions Strategy, Mitratech (Host) Mary Inman, Partner, Constantine Cannon (whistleblower counsel in the Theranos, Facebook, and Boeing cases) About the series: Straight-Talking Global Insight on GRC & Ethics is a global thought-leadership series delivering practical, jargon-free insight on governance, ethics, risk, and compliance from industry leaders worldwide. No waffle. Just clear, decisive conversations on what is changing and what professionals need to do next. Use these 12 Essential Steps to Ensure Whistleblower Protection Compliance: https://mitratech.com/resource-hub/bl... #SECWhistleblower #WhistleblowerProgram #DOJEnforcement #ComplianceProgram #ProactiveCompliance #AIWashing #CorporateCompliance #EthicsHotline #GRC #RegulatoryCompliance #Mitratech