(1) Internal reporting channels and procedures shall include the following:

(a) channels for receiving reports that shall be designed, established and operated in a secure manner that ensures that the confidentiality of the identity of the reporting person and any third party mentioned in the report is protected and prevents access thereto by persons other than those referred to in section 6(9) and any designated person;

(b) acknowledgement, in writing, to the reporting person of receipt of the report not more than 7 days after receipt of it;

(c) the designation of an impartial person or persons who are competent to follow-up on reports (who may be the same person or persons as the recipient of the report) (in this section referred to as a 'designated person') who will maintain communication with the reporting person and, where necessary, request further information from, and provide feedback to, that reporting person;

(d) diligent follow-up by the designated person, which shall include at least the following: