Your company must acknowledge receipt of the whistleblower’s report within seven days. Additionally, within three months, you must inform the whistleblower of any steps taken in response to the report, including any investigation outcomes or actions taken to address the issue.