There's a big difference between a system for submitting and collating issues. You want to be really flexible with inputs on this kind of thing, and specificall

There's a big difference between a system for submitting and collating issues. You want to be really flexible with inputs on this kind of thing, and specifically to allow anonymous (which means non-electronic) means. Free form text is also a benefit, because trying to put enough dropdowns for someone who is not a security expert to classify the thing they saw that might be wrong, but they don't really know, is a great way to put people off / misclassify things. The submission system is also going to have security/classification issues up the ying yang in terms of wanting lots of people to use it, yet storing highly sensitive data. You can have really rigorous procedures without putting them on a computer. You can also have really rigorous procedures without needing a special computer system to manage them.