Ethical Compliance & Whistleblowing Framework

This criterion assesses the robustness, operational effectiveness, and spiritual integrity of the organization's ethical compliance and whistleblowing framework. It evaluates the existence of a comprehensive policy suite (Code of Ethics, Speak-Up Policy, Investigation SOP, Retaliation Prevention Standard) that aligns with regulatory mandates (PIDA, FCA, SRA, Charity Commission) and Islamic principles of Justice (`Adl`), Trustworthiness (`Amanah`), and God-consciousness (`Taqwa`). The framework must ensure accessible, multi-channel reporting (including anonymous digital and non-digital routes) for all 'workers' and external stakeholders (suppliers, clients, patients). Crucially, it requires rigorous operational controls: defined Service Level Agreements (SLAs) for triage and investigation, strict independence and conflict-of-interest management, and a formal 'Anti-Retaliation Protocol' that actively monitors reporter welfare. The system must map internal concerns to external regulatory notifications (e.g., Serious Incident Reporting, SARs, ICO breaches) via a clear decision matrix. Islamic ethics are embedded not just in intent but in process—viewing reporting as `Nasiha` (sincere counsel) and `Shahada` (testimony) that must not be concealed (Q2:283), while ensuring investigations uphold `Adl` (due process) and avoid `Zulm` (injustice/harm). Effectiveness is measured through a composite scorecard of timeliness, substantiation, and reporter trust, ensuring the organization proactively blocks means to corruption (`Sadd al-Dharā'iʿ`).