What to report, how to report it, and how protection actually works in embassy settings

1) What this artifact is

A staff-facing operational guide explaining how to report:

  1. Waste, fraud, abuse, misconduct, or mismanagement (WFA / internal wrongdoing), and
  2. Suspicious behavior with potential security or counterintelligence implications (LES, FSOs, contractors, or others),

in a way that is institutionally correct, personally protective, and operationally effective.

This guide is designed for real embassy conditions, where staff are often unsure:

  • whether something is “serious enough” to report,
  • which channel to use,
  • whether going through a supervisor is required,
  • and whether reporting will put their job at risk.

It integrates FAM expectations, Office of Inspector General (OIG) processes, DSS/RSO security pathways, and federal whistleblower protections, without reproducing legal text.

Primary authoritative sources referenced:

  • State Department Office of Inspector General (OIG) — reporting waste, fraud, abuse, and misconduct (oig.state.gov)
  • OIG Hotline (confidential reporting) (oig.state.gov/hotline)
  • Whistleblower protections for federal employees (U.S. Office of Special Counsel) (osc.gov)
  • Foreign Affairs Manual — ethics, conduct, and reporting expectations (esp. 3 FAM, 12 FAM)
  • Diplomatic Security / RSO authorities (security and counterintelligence reporting pathways) (state.gov/diplomatic-security)

2) Who it is for

  • FSOs and LES at any level
  • Supervisors who receive reports and must handle them correctly
  • Staff who suspect wrongdoing, mismanagement, or security risks
  • Anyone unsure whether to escalate, document, or report

This applies regardless of grade, tenure, or employment category.

3) How the work actually functions (process)

A) Two distinct reporting domains (do not conflate)

Embassy reporting obligations fall into two different systems, each with its own logic and protections.

Domain 1: Waste, Fraud, Abuse, Misconduct, or Mismanagement (WFA)

What this includes:

  • misuse of government funds or property,
  • falsified records or reporting,
  • abuse of authority,
  • serious violations of law, regulation, or policy,
  • gross mismanagement or gross waste,
  • retaliation against employees.

Primary reporting authority:
State Department Office of Inspector General (OIG)

How reporting works:

  • Reports can be made directly to OIG, confidentially or anonymously.
  • Reporting does not require supervisor approval.
  • OIG determines whether and how to investigate.

OIG exists outside Mission management, specifically to avoid conflicts of interest.

What this includes:

  • unexplained or inappropriate access attempts,
  • unusual contact with foreign intelligence or security services,
  • coercion, blackmail, or undue influence,
  • anomalous behavior inconsistent with role or clearance,
  • attempts to bypass security procedures.

Primary reporting authority:

  • Regional Security Officer (RSO)
  • Diplomatic Security (DSS)

How reporting works:

  • Reports are handled as security concerns, not accusations.
  • Early reporting is protective; delay increases risk.
  • Staff are not expected to investigate — only to report observations.

Security reporting is governed by 12 FAM expectations for safeguarding personnel, facilities, and information.

B) Do you have to go through your supervisor?

No — not always.

  • WFA / whistleblower reports:
    You may go directly to OIG or OSC without informing your supervisor. This is explicitly protected under federal law.
  • Security-related suspicious behavior:
    You may report directly to RSO/DSS, especially if the concern involves your supervisor or chain of command.

However:
If the issue is operational, minor, or ambiguous, raising it through your supervisor first may be appropriate — unless doing so would create risk or retaliation.

C) Whistleblower protection — what it actually covers

Federal whistleblower protections protect employees who make good-faith disclosures of:

  • violations of law, rule, or regulation,
  • gross mismanagement,
  • gross waste of funds,
  • abuse of authority,
  • substantial and specific danger to public health or safety.

Protection applies even if the concern turns out to be unfounded, as long as the report was made in good faith.

Oversight is provided by the U.S. Office of Special Counsel (OSC).

4) Common failure patterns (paired with corrections)

Failure 1 — Waiting for certainty

Pattern: “I’m not 100% sure.”
Correction: You are not required to prove wrongdoing. Report observations; authorities assess.

Failure 2 — Treating security concerns as HR issues

Pattern: Suspicious behavior handled informally or ignored.
Correction: Route potential security issues to RSO/DSS immediately.

Failure 3 — Reporting only through local management

Pattern: Concern raised only within the section.
Correction: Use independent channels (OIG, RSO) when appropriate.

Failure 4 — Fear of retaliation

Pattern: Silence due to job insecurity.
Correction: Whistleblower protections exist specifically to prevent retaliation; document and report if retaliation occurs.

5) Realistic scenarios (≥3)

Scenario 1 — Suspected misuse of funds

You notice irregularities in procurement records.

Correct approach:

  • Preserve documents.
  • Report to OIG Hotline.
  • Do not confront individuals directly.

Scenario 2 — Colleague exhibits anomalous behavior

An employee repeatedly seeks access outside their role.

Correct approach:

  • Report observations to RSO.
  • Stick to facts; avoid speculation.

Scenario 3 — Retaliation after raising concerns

After raising an issue, duties are reduced or hostility increases.

Correct approach:

  • Document changes.
  • Report potential retaliation to OIG or OSC.

6) Checklists / templates (≥2)

Checklist A — Reporting Pathway Decision

  • Is this about misuse, misconduct, or mismanagement? → OIG
  • Is this about security, coercion, or anomalous behavior? → RSO / DSS
  • Is retaliation involved? → OIG / OSC
  • Is immediate danger present? → RSO / Front Office

Template B — Factual Observation Log

Date/Time:
Location:
Individuals involved:
Observed behavior (facts only):
Why it raised concern:
Documents or evidence available:
Who was notified (if anyone):

7) What not to assume / not to do

Do not assume

  • that reporting requires certainty,
  • that using official channels is disloyal,
  • that supervisors must always be the first stop.

Do not do

  • investigate on your own,
  • confront the subject directly,
  • delay reporting out of discomfort.