Organizations must provide employees, board members, and volunteers a confidential means to report suspected impropriety or misuse of organizational resources. Organizations should have in place a policy prohibiting retaliation against persons reporting improprieties.