Regional Whistleblowing & Incident Management Benchmark for 2025

As one of the earliest ethics officers in the industry, Carrie Penman previously served four years as deputy director of the Ethics and Compliance Officer Association, now ECI. A scientist by training, she developed and directed the first corporate-wide global ethics program at Westinghouse Electric Corporation between 1994 and 1999. Carrie now leads NAVEX’s risk management processes and oversees its internal ethics and compliance program.   

Carrie has extensive client-facing risk and compliance consulting experience, including more than 15 years as an adviser to boards and executive teams. Carrie was awarded the inaugural Lifetime Achievement Award for Excellence in Compliance 2020 by Compliance Week magazine. In 2017, she received the ECI’s Carol R. Marshall Award for Innovation in Corporate Ethics for an extensive career contributing to the advancement of the ethics and compliance field worldwide.

Jan Stappers is an expert in organizational whistleblowing management, data privacy, governance, risk management, and regulatory compliance. He is engaged in the development of the new ISO 37002 Standard, is a frequent speaker on subjects related to whistleblowing, and has authored various articles on new legislation concerning whistleblower protection, anti-corruption, and organizational whistleblowing best practices.  

Jan is an International Association of Privacy Professionals (IAPP) Certified Information Privacy Professional (CIPP/E). He holds a Postgraduate Diploma (PGDip) from King’s College London in the United Kingdom (EU Competition Law) and a master’s degree (LL.M) from Leiden University in the Netherlands (European Law). 

Jan was recently accepted as a member into The United Nations Economic Commission for Europe’s (UNECE) “Working Party on Regulatory Cooperation and Standardization Policies.” This working party is broken into six parts and Jan is a member of the Group of Experts on Risk Management in Regulatory Systems.

Andy is Head of Whistleblowing and Speak Up for the NatWest Group. Starting his career with NatWest in 1984, he has held numerous front line and risk function roles, predominantly in the Retail and Private Banking sectors. His experience spans compliance, operational risk, credit risk and financial crime.

Following the introduction of new whistleblowing regulations by the UK’s financial regulators in 2016, Andy led the development and implementation of a group-wide whistleblowing framework at NatWest. This provides a mechanism for colleagues across the bank to confidentially raise concerns about unethical behaviour and wrongdoing, helping to support a strong risk culture.

Andy was also a Special Constable with the Metropolitan Police Service for 29 years. He received a long service award from the Commissioner of the Metropolitan Police prior to retiring in 2018.