Building a Speak-Up Culture: 7 Proven Strategies to Increase Ethics Reporting by 3x

Building speak-up culture is the single most effective way to close the gap between what happens in your organization and what gets reported. Here's a number that should keep compliance leaders up at night: most organizations receive only 1-2 reports per 100 employees each year. That doesn't mean only 1-2 things go wrong. It means dozens — maybe hundreds — of issues stay hidden.

The gap between what happens and what gets reported is where risk lives. And it's massive.

When employees trust the reporting process, they use it. When they use it, you catch problems early. When you catch problems early, you avoid the fines, lawsuits, and damage that come from letting issues grow.

This isn't theory. Organizations with mature ethics reporting cultures see rates of 3 or more reports per 100 employees. Some reach 3.6 or higher. That's a 2-3x increase over the average.

This guide walks you through seven proven strategies to get there. Each one is grounded in data, behavioral science, and real-world experience from compliance programs that have made the shift.

TL;DR: Key Takeaways

A speak-up culture means employees feel safe, supported, and driven to report concerns — and trust that action will follow.
Low reporting rates don't mean low misconduct. They mean low trust.
Seven strategies — from leadership modeling to caller experience design — can boost reporting rates.
The DOJ now checks whether organizations foster a culture of reporting.
Metrics like identified caller rates, caller satisfaction, and reports per 100 employees tell you whether your culture is working.

Why Building Speak-Up Culture Matters More Than Ever

Regulators have made their expectations clear. The DOJ's updated Corporate Enforcement Policy now places heavy weight on whether companies maintain effective compliance programs. A core part of that review is whether employees actually report concerns.

It's not enough to have a hotline. You need people to use it.

The Federal Sentencing Guidelines back this up. An "effective compliance program" must include ways for employees to report misconduct without fear of payback. But the guidelines go further. The program must also promote "an organizational culture that encourages ethical conduct and a commitment to compliance."

In other words, the tools are table stakes. Culture is what the DOJ really looks for.

The business case is just as strong. According to the Association of Certified Fraud Examiners (ACFE), tips are the number one way fraud is found. They beat audits, management reviews, and every other method. Organizations with reporting hotlines detect fraud faster and lose far less money per case.

So how do you build the kind of culture where people actually speak up?

Strategy 1: Leadership Sets the Tone for a Speak-Up Culture

Culture starts at the top. Always. If the CEO and senior leaders don't visibly champion ethics, no amount of posters, emails, or training will move the needle.

This doesn't mean leaders need to give a compliance lecture every quarter. It means they need to:

Talk about ethics in everyday conversations. When a leader brings up the code of conduct during a strategy meeting — not just during compliance week — it signals that ethics is part of how the company runs.
Share results (without names). When employees see that reports lead to real action, trust grows. Leaders can say, "We received a concern about X, looked into it, and took corrective action." No names. No details that break privacy. Just proof that the system works.
Show they're human too. Leaders who admit mistakes and ask for feedback create safety. That safety is the bedrock of any speak-up culture.

The compliance team can't own culture alone. Your job is to give leaders the language, the data, and the talking points to make ethics a visible priority.

Strategy 2: Remove Friction From Every Reporting Channel

Every barrier between an employee and a report is a reason not to speak up. Friction kills reporting.

Think about what your current process looks like from the reporter's view:

Do they have to remember a phone number or URL?
Do they have to wade through a confusing web form?
Do they have to figure out which channel to use for which type of concern?
Do they wonder whether their report will reach someone who cares?

The best compliance programs bring everything together. A single, branded ethics portal gives employees one place to go for all reporting. That includes hotline calls, web forms, and text-based reports. It also holds policies, leadership messages, and FAQs about the reporting process.

When you make reporting easy, you remove excuses. When you remove excuses, you get data. And data is what lets you manage risk.

Strategy 3: Invest in the Caller Experience

This is where most organizations get it wrong — and it's the strategy with the biggest impact on your speak-up culture.

Think about what happens when someone calls your ethics hotline. For most callers, this is the most stressful phone call they've made in years. They're nervous. They're unsure. They might be shaking.

And what do they get? In many organizations, they get a scripted intake process. An agent reads from a decision tree. The call lasts six or seven minutes. It feels cold, rushed, and robotic.

That experience shapes everything. If the call feels impersonal, the employee walks away thinking, "They don't really care." They won't call again. And they'll tell their coworkers not to bother.

Now picture the opposite. The person on the other end is a trained Risk Specialist — someone with 160+ hours of training in ethics, compliance, and behavioral science. That specialist uses an adaptive approach. They follow the conversation where it leads rather than forcing it through a script. The call lasts 14-15 minutes instead of 6-7. The specialist takes time to build trust and gather full, detailed information.

The difference in outcomes is dramatic:

Drop-off rates plummet. When callers feel heard, they stay on the line. Best-in-class programs see drop-off rates below 1%. The industry average sits at 15-19%.
Identified caller rates rise. When callers trust the process, roughly 75% choose to give their name. The average is about 50%. Identified callers make investigations faster and more effective.
Report quality improves. Longer, more thoughtful conversations produce richer data. That means better investigations, faster closures, and more useful insights.
Caller satisfaction climbs. Programs that invest in the caller experience see satisfaction rates of 91% or higher.

The hotline isn't just a compliance checkbox. It's the front door of your speak-up culture. Make that first experience great, and everything else improves.

Strategy 4: Close the Feedback Loop

Nothing destroys a speak-up culture faster than silence.

When an employee reports a concern and never hears what happened, they draw one of two conclusions. Either nobody looked into it, or nobody cared. Both lead to the same result — they stop reporting, and they tell others to do the same.

Closing the feedback loop means:

Confirm receipt quickly. Even a simple "We received your report and it's being reviewed" goes a long way.
Give status updates. You don't need to share investigation details. But letting the reporter know their concern is being worked on keeps trust alive.
Share outcomes (where you can). "We finished our review and took the right steps" is often enough. The reporter doesn't need specifics — they need to know the system works.
Track corrective actions to the finish line. Structured plans for follow-up ensure that investigations lead to real change — not just findings that sit in a file. Root cause analysis, policy updates, and training needs should all be tracked and recorded.

This is also where your case management system becomes critical. A modern platform should let you track every report from intake through investigation, resolution, and corrective action. This creates an audit-ready trail that proves your program doesn't just receive reports but acts on them.

Strategy 5: Protect Reporters to Sustain Your Speak-Up Culture

Fear of payback is the number one reason employees don't report misconduct. Every survey and every study confirms this.

And here's the hard truth: having a non-retaliation policy isn't enough. Employees don't read policies. They watch what happens to the people who speak up.

A strong speak-up program requires visible, steady, and firm protection of reporters:

Check in after reports are filed. Follow up with the reporter at 30, 60, and 90 days. Has anything changed in their work life? Have they faced any negative actions?
Treat retaliation claims with the same weight as the original report. If a reporter says they've been punished for speaking up, take it seriously. Look into it. And if it happened, hold the person responsible — no matter their title.
Make the results known. When employees see that a manager was held to account for punishing a reporter, it sends a strong message. You don't need to name names. You need to name the behavior and the outcome.
Offer many reporting channels. Some employees won't report to their manager. Some won't use the hotline. Some prefer web forms. Others want to submit by text. The more channels you offer, the more likely employees are to find one that feels safe.

Retaliation protection isn't a policy. It's a practice. And it needs to be visible enough that every employee can point to proof that reporters are protected.

Strategy 6: Use Data to Measure Your Speak-Up Culture

You can't improve what you don't measure. And most compliance programs track the wrong things.

Counting the number of reports you receive is a start. But it doesn't tell you whether your culture is healthy. A spike in reports could mean your culture is getting better (people feel safer) or getting worse (more misconduct is happening). Without context, the number means nothing.

Here are the metrics that actually tell you whether your speak-up culture is working:

Reports per 100 employees. This is your baseline engagement metric. Organizations with strong cultures see 3+ reports per 100 employees each year. If you're below 2, your culture likely has trust gaps.
Identified caller rate. When 75% of callers choose to give their name, it signals deep trust in the process. If your rate is closer to 50%, employees may fear payback or doubt privacy.
Drop-off rate. If callers are hanging up before finishing their report, something is wrong with the experience. Best-in-class programs keep this below 1%.
Time to resolution. How long does it take to close a case? Some programs resolve cases in hours. For example, Ethico's average resolution time is 6.5 hours. If yours takes weeks, that delay erodes trust.
Confirmed rate by category. Are certain types of reports more likely to be proven true? This helps you spot where your real risks are — and where to focus prevention.
Reporter satisfaction. Do callers feel heard? Do they feel the process was fair? This is the best leading sign of whether your culture will last.

Analytics platforms that turn your case data into dynamic dashboards make this kind of review possible. They save your team from drowning in spreadsheets. Role-based views let you share the right insights with leaders, the board, and department heads. Each person sees the data most relevant to their role.

Strategy 7: Run Regular Risk Assessments to Stay Ahead

A speak-up culture doesn't exist in a vacuum. It's shaped by the risks your organization faces, the pressures your employees feel, and the gaps in your current controls.

Regular risk assessments help you learn where your culture is strong and where it's weak. They also show regulators that your program is forward-looking — not just reactive.

Good risk assessments for speak-up culture should:

Reach the right people. Use HRIS links to target specific roles, departments, or locations. A one-size-fits-all survey misses the details that matter.
Cut friction for participants. Magic link access (no login needed) can push completion rates to 80-90%. Older survey tools typically see 40-60%. Higher turnout means better data.
Show results clearly. Automated heat maps help you quickly spot high-risk areas. Custom scoring methods let you weight factors based on your unique risk profile.
Connect to action. Findings should feed straight into your case management and corrective action workflows. Spotting a risk only matters if you do something about it.

Risk assessments also give you a strong story for the board and regulators. They show that you're not waiting for problems to surface — you're actively looking for them.

Putting It All Together: The Speak-Up Culture Flywheel

These seven strategies aren't isolated tactics. They form a flywheel.

Leadership sets the tone. Simple channels make reporting easy. A great caller experience builds trust. Closing the feedback loop reinforces that trust. Reporter protection removes fear. Data tells you what's working. Risk assessments keep you ahead of new threats.

Each element strengthens the others. As trust grows, reporting increases. As reporting increases, you get better data. As you get better data, you make smarter choices. As you make smarter choices, trust grows further.

The organizations that reach 3+ reports per 100 employees — the ones that catch problems early, resolve them quickly, and prove program results to regulators — invest in every part of this flywheel.

Common Mistakes That Undermine Speak-Up Culture

Even well-meaning programs can hurt their own culture. Watch out for these traps:

Treating the hotline as a checkbox. If your reporting line is staffed by untrained agents reading scripts, you're telling employees their concerns don't deserve a real conversation.
Celebrating low report numbers. Some leaders see few reports as a sign of a healthy organization. It's usually the opposite. Low numbers mean low trust.
Uneven follow-through. If you dig deep into some reports and let others sit, employees notice. Consistency is non-negotiable.
Leaning too hard on anonymous reporting. Anonymous reports matter. But a high anonymity rate is a warning sign. It means employees don't trust you enough to share their name. Focus on building the trust that makes sharing feel safe.
Ignoring middle management. Senior leaders may champion ethics, but middle managers control the daily employee experience. If a manager punishes or brushes off a reporter, it doesn't matter what the CEO said at the town hall.

FAQ: Building Speak-Up Culture

What is a speak-up culture in the workplace?

A speak-up culture is a workplace where employees feel safe, encouraged, and supported in reporting ethical concerns or misconduct — without fear of payback. It goes beyond having a hotline. It means employees trust that their concerns will be heard, looked into, and acted on.

How do you measure whether a speak-up culture is working?

Key metrics include reports per 100 employees (3+ shows strong engagement), identified caller rate (75% suggests high trust), hotline drop-off rate (below 1% is best-in-class), caller satisfaction scores, and time to case resolution. Tracking these over time shows whether your culture is growing or stalling.

How long does it take to build a speak-up culture?

Culture change takes years, not quarters. Most organizations start seeing clear gains in reporting rates within 12-18 months of making big changes. But keeping those gains requires ongoing work — leadership engagement, reporter protection, and steady program updates.

Does the DOJ really look at speak-up culture?

Yes. The DOJ's Corporate Enforcement Policy and the Federal Sentencing Guidelines both check whether organizations have real ways for employees to report misconduct. They also check whether companies foster a culture that encourages ethical conduct. Prosecutors look at whether employees feel safe reporting and whether reports lead to real action.

What's the difference between a speak-up culture and a whistleblower program?

A whistleblower program is a formal tool — a hotline, a web form, a reporting channel. A speak-up culture is the broader setting that decides whether employees actually use those tools. You can have a whistleblower program without a speak-up culture (and many organizations do). The goal is to build the culture that makes the program work.

Moving Forward

Building speak-up culture is one of the highest-impact investments a compliance program can make. It improves risk detection, strengthens your position with regulators, and creates the kind of trust that makes every other compliance effort more effective.

The strategies in this guide aren't quick fixes. They require commitment, consistency, and the right tools. But the organizations that do this work — the ones that treat every report as a gift and every reporter as someone worth protecting — are the ones that catch problems before they become crises.

If you're wondering whether your current reporting program is helping or hurting your speak-up culture, start with the metrics. Look at your reports per 100 employees, your drop-off rate, your identified caller rate, and your caller satisfaction scores. Those numbers will tell you exactly where you stand — and where to focus next.

Want to see how your reporting metrics stack up? Check out why 75% identified caller rates matter for DOJ compliance evaluations — and what your numbers say about your program's health.