The report is based on the findings of substantiated whistleblowing investigations (excluding phishing) and provides senior managers with examples of where things have gone wrong, and can be used for proactive risk management in formal conduct plans, business process improvement and enhanced training content.