How to Measure the Health of Your Speak-Up Culture

You cannot manage what you do not measure. But the metrics most compliance functions track do not measure speak-up culture — they measure speak-up activity.

The compliance function that tracks its speak-up system through case volume, channel utilisation rates, case closure times, and reporter satisfaction scores is tracking the system's activity. These are legitimate operational metrics — they tell the compliance function whether the system is functioning, whether cases are being handled within acceptable timeframes, and whether reporters who used the system found the experience acceptable.

What they do not tell you is whether the speak-up culture is healthy. Whether the people who have concerns are raising them. Whether the volume of reports reflects the actual volume of concerns in the organisation or only the fraction of concerns whose holders trusted the system enough to report. Whether the reporters who used the system and experienced the process would use it again — and would tell others to do the same.

The gap between measuring speak-up activity and measuring speak-up culture health is the gap between knowing that the channel exists and functions, and knowing whether the culture it is supposed to serve is real. Closing that gap requires a different set of measurement approaches — ones that go beyond the data the system generates through its own operation, and that probe directly into the culture and the behaviours that determine whether speaking up is genuinely possible.

What to measure when you want to know whether the culture is working.

The concern-to-report ratio is the most important indicator that most compliance functions are not measuring. It asks: of the concerns that exist in the organisation — identified through exit interviews, engagement surveys, informal conversations, manager feedback — what proportion are being raised through the formal speak-up system? A high ratio suggests a healthy channel. A low ratio — a large volume of concerns identified informally but a small volume reported formally — suggests that something is preventing the translation from concern to report.

The quality and nature of reports reveals as much about the culture as the volume. An organisation whose speak-up channel receives a high proportion of clearly substantiated, well-evidenced concerns has a channel that sophisticated users trust — people who have thought carefully before reporting and have confidence that the system will handle what they bring to it. An organisation whose channel receives primarily vague, low-specificity concerns may have a channel that is used most readily for low-stakes matters, while higher-stakes concerns are being resolved — or suppressed — elsewhere.

Reported concern demographics is an indicator that most compliance functions have not yet built into their analysis framework, but that reveals important information about whether the speak-up system is reaching the whole organisation. If reports come predominantly from specific geographies, functions, or seniority levels — and not from others — the pattern warrants investigation. The silence of a geography or function is not necessarily a positive signal. It may reflect a culture in that part of the organisation that makes speaking up feel particularly unsafe.

Post-report retention and career trajectory of reporters — tracked over a 12 to 24 month period following the submission of a concern — is the most direct available measure of whether the anti-retaliation commitment is functioning in practice. An organisation that tracks this data and finds no pattern is providing evidence of protection that no policy statement can replicate. An organisation that finds a pattern — that reporters are disproportionately likely to leave, be passed over for promotion, or receive lower performance ratings — has identified a retaliation problem that its formal protective measures have not been sufficient to prevent.

Measurement that does not lead to decisions is not intelligence — it is record-keeping.

A speak-up culture measurement framework is only as valuable as the decisions it drives. The compliance function that collects rich data about the health of its speak-up system and presents it to governance without specific analysis of what the data reveals and what it recommends in response has performed the measurement function but not the advisory function. The two are not the same.

The measurement framework should be designed around a set of questions that the compliance function is genuinely trying to answer: Is the channel reaching the populations that carry the greatest risk? Is the response process building or eroding trust over time? Are the managers in high-risk functions demonstrating the behaviours that make speaking up feel safe? Is the feedback loop functioning in a way that reporters experience as meaningful? The metrics are inputs to these questions, not outputs in their own right.

Benchmarking adds the dimension of comparison. Internal benchmarking — tracking the same indicators over time — reveals whether the speak-up culture is improving, stable, or deteriorating. External benchmarking — where data is available through industry surveys, regulatory publications, or professional networks — provides a reference point for assessing whether the organisation's indicators are strong, average, or weak relative to comparable organisations. Both forms of benchmarking are useful. Neither is sufficient without the other.