Whistleblower policy and

conflict of interest policy

Is having a policy good enough or do you have to follow your policy? Are the policies available to anyone to look at? If an organization doesn’t follow its own policy who is accountable?