How to Train Managers to Respond to Speak-Up Reports
Managers often hear concerns first. Give them a simple listen, protect, route, and follow-up routine, plus scenarios that prepare them before a real report arrives.
Daniel Brooks is a fictional OkayLoop editorial persona representing the recurring perspective of people operations leaders. Articles are reviewed by the OkayLoop editorial team.
Most organizations invest in a reporting hotline, an anti-retaliation policy, and an annual reminder that both exist. Then a concern arrives in a different place: a one-to-one meeting, a hallway conversation, or a direct message to a team lead. In many organizations, the first person to hear a concern is a direct manager.
What that manager says in the next five minutes shapes whether the issue reaches the right people and whether the employee would raise a concern again. Yet manager training on speak-up is often a single slide in a broader ethics course.
This guide offers a practical routine and a set of practice scenarios that People Ops and compliance teams can use to prepare managers before a real report lands.
Why the manager moment matters
Regulators and standard setters increasingly look past whether a reporting channel exists to whether people trust it.
- The U.S. Department of Justice’s Evaluation of Corporate Compliance Programs includes a section on commitment to whistleblower protection and anti-retaliation. It asks whether companies encourage reporting or engage in practices that chill it.
- The EU Whistleblowing Directive requires internal reporting channels for many employers with 50 or more workers and protects reporting persons against retaliation.
- ISO 37002 provides guidance on whistleblowing management systems built on trust, impartiality, and protection.
None of these frameworks expect managers to investigate. All of them depend on managers not discouraging, mishandling, or punishing a report.
A four-step routine managers can remember
Keep the routine short enough to recall under pressure.
1. Listen
Thank the person for raising it. Let them finish. Ask open, clarifying questions only to understand what they are describing, not to test whether they are right.
2. Protect
Explain what you can and cannot promise. A manager can commit to handling the concern respectfully and routing it appropriately. A manager usually cannot promise complete confidentiality or a particular outcome. Remind the person that retaliation is prohibited and that they can also use other channels, including anonymous ones where available.
3. Route
Pass the concern to the designated function—compliance, HR, legal, or the reporting channel—according to your policy, and do it promptly. Record what was said in neutral language. Do not start your own inquiry.
4. Follow up
Check in with the employee about how they are doing, without discussing the investigation. Watch for signs of retaliation within the team, including subtle ones.
What managers should not do
Training should be explicit about common, well-intentioned mistakes:
- trying to find out who else is involved or who might have told someone;
- confronting the person the concern is about;
- deciding the issue is “just a personality conflict” and keeping it local;
- promising confidentiality or anonymity that the organization cannot guarantee;
- delaying routing until they have “more information”; and
- changing the reporter’s schedule, assignments, or review timing without HR involvement.
Retaliation is not always dramatic. Being left out of meetings, losing a desirable project, or receiving an unexpectedly harsh review can all be experienced as retaliation. Managers should treat any change affecting the reporter as something to review with HR first.
Scenarios worth practicing
Short scenarios build judgment faster than policy summaries. Assign them by manager context, and make the feedback explain the reasoning.
| Scenario | The decision being practiced |
|---|---|
| During a one-to-one, an employee casually mentions that a colleague has been splitting expenses to stay under approval limits. | Recognizing that an informal comment is still a report that must be routed. |
| A team member sends a direct message late at night saying a customer was promised terms the contract does not allow. | Responding in writing, avoiding judgment, and routing promptly. |
| An employee raises a concern about the manager’s own leader. | Using an alternate channel when the normal reporting line is conflicted. |
| A concern is raised one week before performance reviews. | Separating the review process from the report and involving HR. |
| A remote employee hints at a problem but says they do not want it “to become a thing.” | Explaining options honestly without promising secrecy. |
| Someone reports that a colleague pasted customer data into an unapproved AI tool. | Routing a policy and security concern without attempting to investigate. |
Run scenarios again when your policy, reporting channels, or organization structure changes. Reductions in force and restructurings deserve particular attention, because uncertainty can increase both concerns and the perceived risk of raising them.
Fitting the training into manager development
Speak-up readiness works best as a recurring part of being a manager, not a one-time module.
- New managers: include the four-step routine in the first 30 days of the role, alongside other manager responsibilities. The sequencing ideas in the new-hire compliance onboarding checklist apply to promotions too.
- Distributed teams: practice written and asynchronous reports, which are more common for remote staff. See role-based compliance training for remote and hybrid teams.
- Reinforcement: schedule a short scenario every quarter rather than a long annual session.
- Access: make the routing path, reporting channels, and HR contact easy for managers to find in the moment.
Measuring whether it works
Avoid treating a low number of reports as a success. It can signal low trust as easily as low misconduct. Look for a combination of signals instead:
- managers correctly identify routing steps in scenario questions;
- concerns raised through managers reach the designated function promptly;
- employees report knowing how to raise a concern and believing it would be handled fairly, in surveys designed with appropriate confidentiality; and
- retaliation complaints are reviewed and trends are discussed with leadership.
The measurement model in compliance training metrics that matter beyond completion helps keep delivery, comprehension, and program signals separate.
Getting started
Begin with your current speak-up policy and the three or four situations your managers are most likely to face. Write the four-step routine in plain language, turn each situation into a scenario, and test it with a small group of managers before a wider rollout.
If you want to deliver this as short, role-specific practice for managers, see how HR and People Ops teams use OkayLoop, or book a demo with your speak-up policy.
Reviewed by OkayLoop Editorial.