Can you depend on a whistle-blower policy to encourage people to question practices that may put the organization or clients at risk?