Whistleblowing Policy

1. SCOPE

This Whistleblowing Policy (“Policy”)relates to F.F.I. Holdings Limited (“FFI”) and its related bodies corporate (together “FFI”, “we”, “our” and “us”).This Policy forms part of FFI’s risk management and corporate governance framework and has been approved by the FFI Board of Directors. FFI is committed to an environment where employees (and non-employees) can report issues in an environment free from victimisation. This Policy is designed to ensure that wrongdoing is uncovered and to give individuals the confidence to speak up. We are committed to identifying and addressing wrongdoing as early as possible and protecting and supporting the dignity, wellbeing, career (for employees) and good name of anyone reporting an issue.

‍

2. PURPOSE OF THIS POLICY

The purpose of this Policy is to:

  • support individuals who make an eligible disclosure about wrongdoing to do so safely, securely and with confidence that they will be protected and supported;
  • ensure disclosures are dealt with appropriately and on a timely basis;
  • provide transparency around FFI’s framework for receiving, handling and investigating disclosures;
  • ensure FFI’s officers and key management personnel understand their obligations if they receive a report from a whistleblower;
  • support a thorough, objective, fair and independent investigation of disclosures;
  • outline how this Policy is to be made available to officers and employees of FFI; and
  • comply with the Corporations Act 2001 (Cth), Taxation Administration Act 1953 (Cth), ASIC Regulatory Guide 270 and ASX     Corporate Governance Principles and Recommendations.

‍

3. TO WHOM DOES THIS POLICY APPLIES: “ELIGIBLE WHISTLEBLOWERS”

The Corporations Act 2001 (Cth) (“theAct”) gives certain people legal rights and protections as whistleblowers.

To be eligible for protection under the Act, an “eligible whistleblower”is an individual who is (or has been) any of the following in relation to FFI:

  • an officer (a director or company secretary);
  • an employee (including, but not limited to, employees who are permanent, part-time or fixed term or temporary);
  • a supplier of services or goods to FFI (whether paid or unpaid), including their employees (this includes current and former contractors and consultants);
  • an associate of FFI; and
  • a relative or dependant of one of the individuals referred to above or a dependant or spouse of one of those individuals.

To qualify for protection, an 'eligible whistleblower' must make the disclosure directly to:

  • a director or company secretary of FFI or an executive member of FFI's Key Management Personnel (as defined in FFI’s most recent Annual Report) or any other person authorised under this Policy to receive a disclosure;
  • FFI’s external auditor, or member of the audit team;
  • an actuary used by FFI;
  • the Australian Securities & Investments Commission (“ASIC”), the Australian Prudential Regulation Authority (“APRA”) or another Commonwealth body prescribed by regulation; or
  • a lawyer (for the purposes of obtaining legal advice or representation about the operation of the whistleblower provisions in the Act).

An ‘Emergency disclosure’ or ‘publicinterest disclosure’ also qualify for protection (further information isdetailed in Attachment A).

While disclosures must be made to one of the above people or organisations,concerns can be raised anonymously and still be eligible for protection.

Tax whistleblower regime

Protections also apply in the tax whistleblower regime i.e. to individuals who disclose information to the Australian Taxation Office on tax avoidance behaviour and other tax issues. Further information on this regime is available here: https://www.ato.gov.au/general/gen/whistleblowers/

‍

4. MATTERS THAT CAN BE REPORTED: “DISCLOSABLE MATTERS”

Set out below are the types of wrongdoing that can be reported under this Policy. These are referred to as “disclosablematters”.

Disclosable matters involve information that the discloser has reasonablegrounds 1 to suspect:

  • concerns misconduct2;
  • concerns an improper state of affairs or circumstances3, or
  • FFI or any of their officers or employees has engaged in conduct that constitutes an offence against, or a contravention of, the Act or other specified financial services legislation or an offence against any other law of the Commonwealth punishable by imprisonment for 12 months or more or conduct that represents a danger to the public or the financial system.

The misconduct or an improper state ofaffairs may also be in respect of tax affairs.

The information can be about FFI, a related body corporate of FFI (includingany subsidiary) or an officer or employee of FFI.

Examples of disclosable matters are:

  • illegal conduct, such as theft, dealing in, or use of illicit drugs, violence or threatened violence, and criminal damage against property;
  • fraud, money laundering or misappropriation of funds;
  • offering or accepting a bribe;
  • financial irregularities;
  • failure to comply with, or breach of, legal or regulatory requirements; and
  • engaging in or threatening to engage in detrimental conduct against a person who has made a disclosure or is believed or suspected to have made or be planning to make a disclosure.

Disclosable matters also include conduct that may not involve a contravention of a particular law. For example:

  • ‘misconduct or an improper state of affairs or circumstances’ may indicate a systemic issue that ASIC should know about to perform its functions properly;
  • dishonest or unethical behaviour and practices or conduct that may cause harm; and
  • information that indicates a significant risk to public safety or the stability of, or confidence in, the financial system.

Notes:

(1) ‘Reasonable grounds’ means that a reasonable person in the  same position would also suspect the information indicates misconduct,  improper state of affairs or circumstances or a breach of the law. This means  that even if a disclosure turns out to be incorrect, the protections will  still apply, provided the eligible whistleblower had 'reasonable grounds' to  suspect.

(2)  ‘Misconduct’ is defined in s9 of the Act to include  ‘fraud, negligence, default, breach of trust and breach of duty’.

(3) The phrase ‘improper state of affairs or circumstances’ is  not defined and is intentionally broad. Internal matters, including breaches  of policy, could constitute an improper state of affairs or circumstances if  those breaches are systemic and relate to matters of interest to a particular  regulator such as ASIC.

Deliberate false reports

We discourage deliberate false or vexatious reports (where you know your reportto be untrue). Individuals who submit a deliberate false report will not beable to access the whistleblower protections under the Act. If anyinvestigation of a disclosure demonstrates that it was not made on objectivelyreasonable grounds, it will not be protected.

Depending on the circumstances, it may be appropriate for FFI to take disciplinary action against any person who does not have objectively reasonable grounds for their disclosure. Such action may include termination of employment.

‍
FFI encourages reporting where you reasonably suspect misconduct, even if thosesuspicions are later determined to be unfounded.

As per RG 270, a discloser can still qualify for protection even if theirdisclosure turns out to be incorrect.

Matters that are not “disclosable matters”

Disclosures that are not about “disclosable matters” do not qualify forprotection under the Act (or the Taxation Administration Act 1953 (Cth)where relevant) and are not covered by this Policy.

For example, disclosures that relate solely to personal work-related grievances(i.e. a grievance about a matter relating to the eligible whistleblower'semployment, or former employment, having (or tending to have) implications forthe eligible whistleblower personally), and that do not relate to detriment orthreat of detriment to the discloser, do not qualify for protection.

Examples are:

  • interpersonal conflict between you and another employee; and
  • decisions that do not involve a breach of workplace laws:
  • about your engagement, transfer or promotion;
  • about the terms and conditions of your engagement; or
  • to suspend or terminate the engagement of the discloser, or otherwise to discipline the discloser.

Importantly though, some personal work-related grievances still qualify for protection if:

  • the grievance includes information about misconduct or an improper state of affairs, or information about such matters includes or is accompanied by a personal work-related grievance (mixed report);
  • FFI has breached employment or other laws punishable by imprisonment for a period of 12 months or more, engaged in conduct that represents a danger to the public, or the disclosure relates to     information that suggests misconduct beyond the discloser’s personal circumstances;
  • the discloser suffers from or is threatened with detriment for making a disclosure (see section 8 below); or
  • the discloser seeks legal advice or legal representation about the operation of the whistleblower protections under the Act.

Personal work-related grievances andother types of issues or concerns that are not covered by this Policy should bereferred to the HR & Business Manager in line with the Workplace ConductPolicy. In some cases, such grievances may be protected under otherlegislation, such as the Fair Work Act 2009 (Cth).

‍

5. WHO CAN PROVIDE ADVICE OR RECEIVE A DISCLOSURE

In order to qualify for protection as awhistleblower under the Act, a disclosure must be made directly to:

  • ‘eligible recipients’;
  • legal practitioners;
  • authorised regulatory bodies and other external parties (see Section 3);

and in certain circumstances:

  • journalists; and
  • members of Commonwealth, state or territory parliaments (“parliamentarians”) (see Attachment A).

A discloser qualifies for protection from the time they make their disclosure, regardless of whether the person or the recipient recognises that the disclosure qualifies for protection at that time.

Eligible recipients

The role of eligible recipients is to receive disclosures that qualify forprotection. At FFI, eligible recipients are:

  • an officer of FFI (being any Director or Company Secretary of FFI) and any other Key Management Personnel (as defined in FFI’s most recent Annual Report, being the Group General Manager); and
  • the external auditor (Moore Stephens), including a member of the audit team, or an actuary used by FFI.

Disclosures outside of FFI

We encourage you to make disclosures internally in the first instance.

A disclosure can, however, be made directly to regulatory bodies (e.g. ASIC),or other external parties such as lawyers (for the purpose of obtaining legaladvice or legal representation in relation to the Act), about a disclosablematter and still qualify for protection under the Act without a priordisclosure being made to us.

Whistleblowing information is provided by ASIC in Information Sheet 239 HowASIC handles whistleblower reports (INFO 239):
https://asic.gov.au/about-asic/asic-investigations-and-enforcement/whistleblowing/how-asic-handles-whistleblower-reports/

Public interest disclosures and emergency disclosures

Disclosures can be made to a journalist or parliamentarian under certain circumstances and qualify for protection. These are detailed in Attachment A.

‍

6. ROLES AND RESPONSIBILITIES

Board of FFI

The Board of FFI is responsible for the ongoing oversight and monitoring of andapproving updates to this Policy and appropriate processes and procedures.

Whistleblower Protection Officer

The Non-executive Chairman of FFI’s Board of Directors and Company Secretary isFFI’s Whistleblower Protection Officer. His role is to:

  • respond to queries about how FFI’s Whistleblowing Policy works, what it covers and how a disclosure might be handled (including to disclosers who wish to seek additional information before formally making their disclosure); and
  • protect disclosers and ensure the integrity of the reporting mechanism.

An eligible recipient should notify theWhistleblower Protection Officer (subject to the discloser’s consent) so thatFFI’s mechanisms for protecting and safeguarding disclosers can commence assoon as possible.

Whistleblower Investigation Officer

The Whistleblowing Protection Officer will, for each disclosure, appoint aWhistleblower Investigation Officer responsible for assessing whether the disclosure falls within this Policy and for investigating the disclosure. FFI may engage external investigation officers or legal advisers to assist with investigating the disclosure.

7. HOW TO MAKE A DISCLOSURE

Disclosure can be made to any one of FFI’s eligible recipients in person or by phone, post or email.

Disclosures may be made anonymously, and/or confidentially, securely and outside of business hours.

In the first instance, disclosures should be made to the Whistleblower Protection Officer:

Rodney Moonen
Email: rod.moonen@ffiholdings.com.au
Tel: +61 8 9417 4088
Address: FFI Holdings Limited,23 Knock PlaceJandakot WA 6164

A disclosure can instead be made to another eligible recipient within FFI, being any member of Key Management Personnel (as defined in the FFI’s most recent Annual Report) or to FFI’s auditor:

Moore Stephens
Email: perth@moorestephens.com.au
Tel: +61 8 9225 5355
Address: Level 15, Exchange Tower, 2 The Esplanade, Perth WA 6000

The person disclosing any matter should inform the recipient that they wish tomake a disclosure under this Policy.

Anonymous disclosures

Disclosures made anonymously are still protected under the Act.

Anonymous disclosures can be made securely and outside of business hours by,for example, leaving a voicemail or using an email address which does notdisclose your identity. You may choose to adopt a pseudonym for the purposes ofthe disclosure, rather than your real name.

An individual can choose to remain anonymous while making a disclosure, over the course of the investigation and after the investigation is finalised. A discloser can refuse to answer questions that could reveal their identity during follow-up conversations. However, reporting anonymously may hinder FFI's ability to investigate fully a disclosed matter. For this reason, ongoing two-way communication is encouraged (such as via an anonymous email address),so that follow-up questions can be asked and/or feedback provided.

‍

8. LEGAL PROTECTIONS FOR DISCLOSERS

The protections available to a discloser who qualifies for protection as a whistleblower are:

  • identity protection (confidentiality);
  • protection from detrimental acts or omissions;
  • compensation and remedies; and
  • civil, criminal and administrative liability protection.

These protections apply not only tointernal disclosures, but also to external disclosures to lawyers, regulatoryand other external bodies, and public interest and emergency disclosures thatare made in accordance with the Act.

FFI takes contraventions of these protections very seriously and will takedisciplinary action against anyone for breaching these protections. If aneligible whistleblower has any particular concerns about this, they can raisethem with FFI's Whistleblower Protection Officer (or a director of FFI).

Civil and criminal sanctions also apply for breaches of these protections.

Identity protection (confidentiality)

It is illegal to identify a discloser, or disclose information that is likelyto lead to the identification of the discloser except, in very limitedcircumstances detailed below.
The identity of the discloser can be disclosed:

  • to ASIC, APRA, the Commissioner of Taxation (in relation to tax matters) or a member of the Australian Federal Police;
  • to a legal practitioner (for the purposes of obtaining legal advice or legal representation about the whistleblower provisions in the Act);
  • another person or entity to which FFI is legally compelled to disclose (including a body prescribed by the Corporations Regulation); or
  • with the consent of the discloser.

If an eligible whistleblower'sdisclosure qualifies for protection set out in this Policy, it is likely thatthe eligible whistleblower will be asked to provide consent to the disclosureof their identity or information that is likely to lead to their identification.This would be to facilitate any investigation and/or resolution of the matter.If consent is withheld, it may not be possible to adequately investigate andrespond (if at all) to the disclosure.

However, the discloser’s consentis not required if:

  • the information does not include the discloser’s identity;
  • FFI has taken all reasonable steps to reduce the risk that the discloser will be identified from the information; and
  • it is reasonably necessary for investigating the issues raised in the disclosure.

ASIC, APRA or the Australian FederalPolice can disclose the identity of the discloser, or information that is likely to lead to the identification of the discloser, to a Commonwealth, state or territory authority to help the authority in the performance of its functions or duties.

FFI seeks to ensure confidentiality by:

  • storing all paper and electronic documents and other materials     relating to disclosures securely with access limited  as reasonably possible to only those directly involved in managing and investigating the disclosure;
  • ensuring communications and documents relating to the investigation of a disclosure are not sent to a group email address;
  • ensuring that only the people who are directly involved in handling and investigating a disclosure are made aware of a discloser’s identity or information that is likely to lead to the identification of the discloser; and
  • reminding each person who is involved in handling and investigating a disclosure that they should keep the identity of the discloser and the disclosure confidential and that an unauthorised disclosure of a discloser’s identity may be a criminal offence.

In practice, it is important torecognise that a whistleblower's identity may still be determined if the personhas previously mentioned to other people that they are considering making adisclosure, the whistleblower is one of a very small number of people withaccess to the information or the disclosure related to information that aneligible whistleblower has previously been told privately and in confidence.

A discloser can lodge a complaint about a breach of confidentiality with:

  • FFI's Whistleblower Protection Officer (or a director of FFI); or
  • a regulator e.g. ASIC.

Protection from detrimental acts oromissions

The Act makes it illegal (through a criminal offence and civil penalty) forsomeone to cause or threaten detriment to a person because they believe (orsuspect) that the other person or third party has made, may have made, or couldmake a whistleblower disclosure, no matter if it is accurate. Threats ofdetriments will be unlawful if the person making the threat intended to causefear that a detriment would be carried out or was reckless as to whether theperson against who it was directed would fear the threatened detriment beingcarried out. Threats may be express or implied, conditional or unconditional.An eligible whistleblower (or another person) who has been threatened inrelation to a disclosure does not have to actually fear that the threat will becarried out.

Detrimental conduct includes:

  • dismissal of an employee;
  • alteration of an employee’s position or duties to their disadvantage;
  • discriminating between an employee and other employees;
  • harassment or intimidation of a person;
  • harm or injury to a person, including psychological harm;
  • damage to a person’s property;
  • damage to a person’s reputation, business or financial position; or
  • any other damage to a person.

The following actions are NOT detrimental conduct:

  • administrative action that is reasonable to protect a discloser from detriment (e.g. when the disclosure relates to wrongdoing in the discloser’s immediate work area); or
  • managing a discloser’s unsatisfactory work performance, if the action is in line with FFI’s performance management framework.

Compensation and remedies

A discloser (or any other employee or person) can seek compensation and otherremedies through the courts if they are subject to detriment or threateneddetriment. These include injunctions, compensation orders (including againstindividual employees and their employer), reinstatement, exemplary damages andthe making of apologies. Civil and criminal sanctions also apply to breaches ofthe Whistleblower Protection Scheme. We encourage a discloser to seekindependent legal advice to understand protections or rights to compensationthat may apply.

Civil, criminal and administrative liability protection

The Act protects a discloser against certain legal actions including:

  • criminal prosecution (e.g. attempted prosecution of the discloser for unlawfully releasing information. The disclosure cannot be used against the whistleblower in a prosecution, unless the disclosure is false);
  • civil litigation (e.g. legal action against the discloser for breach of an employment contract, duty of confidentiality, or other contractual obligation), or
  • administrative action (including disciplinary action for making the disclosure).

This protection does not grant immunity to a whistleblower for any misconduct that they were involved in that is revealed in the disclosure.

‍

9. SUPPORT AND PRACTICAL PROTECTION FOR DISCLOSERS

FFI has appointed a WhistleblowerProtection Officer (the Non-executive Chairman) who is committed to protecting the confidentiality and welfare of a discloser and who will be available to contact at any time. On receiving a disclosure, the Whistleblower ProtectionOfficer will, as soon as practicable, assess and monitor the risk of detriment to the discloser and developing strategies to deal with any such risk and take appropriate steps to manage confidentiality and support an investigation.

Support offered to a discloser by FFI may also include:

  • an independent support person appointed by the Whistleblower Protection Officer to support the discloser; and/or
  • referring the discloser to external independent support providers.

In the situation where a discloserbelieves they have suffered detriment, a complaint can be lodged with any othereligible recipient (a person not involved in dealing with disclosures) andinvestigation findings will be provided to the Board of FFI.

Where detriment is present, FFI will consider the following courses of action:

  • allowing the discloser to take extended leave or perform duties  from another location (if practicable); or
  • developing an alternative career development plan for the discloser, including new training and career opportunities.

Alternatively, a discloser may seek independent legal advice or contact regulatory bodies, such as ASIC, if they believe they have suffered detriment.

‍

10. HANDLING AND INVESTIGATING A DISCLOSURE

Receipt of disclosure

On receipt of a disclosure, subject to the consent of the whistleblower, the eligible recipient must inform the Whistleblower Protection Officer as soon as practicable (subject to applicable confidentiality requirements) who will appoint an appropriate Whistleblower Investigation Officer.

If a disclosure relates to serious misconduct, the FFI Board shall be notified immediately.

If a disclosure relates to an eligible recipient, such disclosure should beimmediately directed to an alternative eligible recipient.

The Whistleblower Investigation Officer will acknowledge receipt of thedisclosure (if the discloser can be contacted).

Investigation

The Whistleblower Investigation Officer will assess:

  • whether the disclosure falls under this Policy; and
  • if a formal, in-depth investigation is required. Each disclosure will be considered on a case by case basis and will consider:
  • the nature and scope of the investigation;
  • the person(s) within and/or outside FFI that should lead the investigation. Any investigation will be independent of the discloser, the individuals who are the subject of the disclosure, and the department involved;
  • the nature of any technical, financial or legal advice that may be required to support the investigation; and
  • the timeframe for the investigation. Each investigation will be different which will impact the applicable timeframe. However, our intent is to complete an investigation as soon as practicable.

Maintaining confidentiality

The Whistleblower Investigation Officer and Whistleblower Protection Officerwill take steps to protect the confidentiality of the investigation process by,for example:

  • reminding the eligible recipient/s of the disclosure of the requirement to maintain confidentiality; and
  • maintaining all electronic records in a private, confidential folder or drive.

Without the discloser’s consent, information contained in a disclosure will not be disclosed to any other party(including to another FFI employee or director) as part of FFI’s investigation process unless:

  • the information does not include the discloser’s identity;
  • information relating to the discloser’s identity or other information that is likely to lead to the identification of the discloser is removed (e.g. the discloser’s name, position title and other     identifying details);
  • it is reasonably necessary for investigating the issues raised in the disclosure; and
  • it is to one of the parties listed in section 8 of this Policy.

Keeping the discloser informed

After the initial acknowledgement, the Whistleblower Investigation Officer will keep the discloser informed of the progress and outcome of the investigation, wherever possible. However, the extent of the information provided, the frequency and timeframe of any updates, or whether it will be provided at all, will be subject to applicable confidentiality considerations, legal obligations and any other factors FFI considers relevant in the particular situation. This process will also be limited in the case of an anonymous disclosure with no means of contacting the discloser.

Our preferred communication method is via email.

Reporting findings

The results of the investigation will be reported to the Board of FFI (havingregard to relevant confidentiality requirements) together with a summary of thematter and the actions taken to date. The method for documenting and reportingthe findings of an investigation will depend on the nature of the disclosure –but may include a summary report of the findings.

Where appropriate, the discloser will be notified of the outcome of the review(but not be provided with a copy of the investigation report).

A flowchart of FFI’s typical whistleblowing process is shown in Attachment B.

‍

11. ENSURING FAIR TREATMENT

FFI is committed to fair treatment ofits employees who are mentioned in a disclosure, including those who are thesubject of a disclosure.
In all cases:

  • disclosures will be handled confidentially, when it is practical and appropriate in the circumstances;
  • each disclosure will be assessed and may be the subject of an investigation;
  • the objective of an investigation is to determine whether there is enough evidence to substantiate or refute the matters reported; and
  • an employee who is the subject of a disclosure will be advised about:
  • the subject matter  of the disclosure as and when required by principles of natural justice and  procedural fairness, and prior to any actions being taken - for example, if  the disclosure is to be the subject of an investigation or if the disclosure  is serious and needs to be referred to ASIC, APRA or the Federal Police; and
  • where appropriate, the outcome of the investigation (but not be provided with  a copy of the investigation report).

‍

12. ACCESSIBILITY OF THIS POLICY

A copy of this Policy has been provided to all existing officers and employees of FFI via their preferred communication method. The Policy will also be included in the induction pack for all newemployees.
FFI’s internal eligible recipients, who include the Whistleblower ProtectionOfficer, understand and have received training on the requirements of thisPolicy and ASIC Regulatory Guide 270.

This Policy is accessible on FFI’s website allowing disclosers outside of FFIto access our Policy.

‍

13. REVIEW AND UPDATE

This Policy will be reviewed by theBoard of FFI (at least every 2 years) to check that it is operating effectively and consider whether any changes are required.

‍

14. OTHER MATTERS

This Policy is not intended to go beyond the legislation. This Policy is not a term of any contract, including any contract of employment and does not impose any contractual duties, implied or otherwise, on FFI. This Policy may be varied by FFI from time to time, including as part of any review.

‍

ATTACHMENT A - PUBLIC INTEREST AND EMERGENCY DISCLOSURES

A ‘public interest disclosure’ is the disclosure of information to a journalist or a parliamentarian, where:

  • at least 90 days have passed since the discloser made the disclosure to ASIC, APRA or another Commonwealth body prescribed by regulation;
  • the discloser does not have reasonable grounds to believe that action is being, or has been taken, in relation to their disclosure;
  • the discloser has reasonable grounds to believe that making a further disclosure of the information is in the public interest; and
  • before making the public interest disclosure, the discloser has given written notice to the body to which the previous disclosure was made that:
  • includes sufficient information to identify the previous disclosure; and
  • states that the discloser intends to make a public interest disclosure; and
  • the extent of the information disclosed in the public interest disclosure is no greater than to inform the journalist or parliamentarian of the misconduct or improper state of affairs or circumstances, or other conduct falling within the scope of the whistleblower protection scheme under the Act.

An ‘emergency disclosure’ is thedisclosure of information to a journalist or parliamentarian, where:

  • the discloser has previously made a disclosure of the information to ASIC, APRA or another Commonwealth body prescribed by regulation;
  • the discloser has reasonable grounds to believe that the information concerns a substantial and imminent danger to the health or safety of one or more persons or to the natural environment;
  • before making the emergency disclosure, the discloser has given written notice to the body to which the previous disclosure was made that:
       
        –  includes sufficient information to identify the previous disclosure; and
        –  states that the discloser intends to make an emergency disclosure; and
  • the extent of the information disclosed in the emergency disclosure is no greater than is necessary to inform the journalist or parliamentarian of the substantial and imminent danger.

You may wish to contact an independentlegal adviser to ensure you are aware of the criteria for making a publicinterest or emergency disclosure that qualifies for protection.

‍

ATTACHMENT B –FLOWCHART OF FFI’S TYPICAL WHISTLEBLOWING PROCESS