ISO/TS 37008

Abstract

This proposal is for an ISO technical specification with guidance on internal investigations of organizations. It will help: • make better use of investigative resources (human, financial and other resources) • establish the policy and procedures to implement and conduct investigations • enhance the investigative capacity of investigators • report the investigative results internally and externally, and • effectively mitigate risk exposures It will provide guidance to identify: • what happened • why it happened (root cause) • who will conduct the investigation • how to conduct investigations (investigative strategy and tactics) • what are the issues and risks • what can be done (remedial actions, including the treatment of secondary risks) • what and how to report • how to prohibit retaliation It will be applicable to all organizations in the public, private, and voluntary sectors.