When a decision breaks a rule, a commitment, or a legal duty, an insider takes it to the body charged with oversight, such as compliance or the audit committee, formally and with documents.
An example
Late in a quarter, a senior quality engineer at an infusion-pump maker learned that the operations director planned to ship a lot of pumps while a complaint investigation into a keypad fault on the same model was still open. The company's own procedure required the investigation to close, or a documented risk assessment to be approved, before release. She raised it with the operations director first and was told the risk was low. She then filed a report through the quality system's escalation route to the head of regulatory compliance, attaching the procedure, the open complaint records, and the release schedule, and stated the facts without guessing at anyone's motive. The compliance head put a hold on the lot within a day. A risk assessment was completed the following week, and the lot shipped eight days late.
Why it works
Taking it to the oversight body makes the planned decision look worse and costlier. Worse, because the people charged with judging the rule now see it broken, in writing; costlier, because going ahead would put the company and the decision-maker on record as overriding a formal control. It works when the rule is clear, the documents show the facts, the channel is the one designed for the purpose, and the report sticks to facts. It depends on an oversight body that acts and on protection against retaliation.
The thinking behind it
Albert O. Hirschman Exit, Voice, and Loyalty: Responses to Decline in Firms, Organizations, and States (1970), by Albert Hirschman, describes voice as trying to change an organization from within, and argues it is more informative than exit because it says what is wrong. A documented report to compliance is voice through the channel built to hear it: the engineer stays, names the breach, and gives the people charged with oversight what they need to act.
Henry Mintzberg In Power In and Around Organizations (1983), Henry Mintzberg describes the whistle-blowing game, in which an insider who sees behavior that violates a norm or law uses privileged information to inform a party who can remedy it, bypassing the chain of authority. Because that questions the hierarchy's legitimacy, retribution is a risk. Going to an internal oversight body, formally and with documents, keeps the remedy inside the company's own rules and gives the insider a record if retribution follows.
When it fits
Appropriate when a decision breaks a written rule, a contract, or a legal duty, when raising it with the decision-maker has failed or would be futile, and when a body exists whose job is to rule on it. You need the documents that show the breach and the patience to let a formal process run. A disagreement about judgment is a different matter.
How to use it well
Raise it with the decision-maker first where you safely can, and note the answer. Many problems end there.
- Identify the body whose job this is: compliance, internal audit, the audit committee, legal, or the ethics line.
- Use its formal channel. State the rule, the facts, and the documents, and leave motive out.
- Keep copies of what you submitted and when.
- Keep doing your job normally while the process runs.
If the body does nothing and the breach is serious, the next level is the one above it, such as the board's audit committee. Take legal advice before going outside the company.
What it costs and where it backfires
Escalation can damage your relationship with the people you escalated about, even when you were right, and the process can be slow and stressful. If you are wrong on the facts, you spend credibility. Retaliation is prohibited in many settings and still happens, so keep records. Documents and the proper channel are the boundary. Leaks, anonymous accusations, guesses about motive, or disagreements dressed up as breaches turn a duty into a campaign.
When it is used on you
Respond with facts and documents if someone escalates your decision to oversight, cooperate fully, and do nothing that could look like retaliation. If the rule was broken, fix it. If the escalation was mistaken, let the process clear you, and keep working normally with the person who raised it.