In terms of additional steps, I honestly think you're doing everything that should be done. The only thing I can think of is finding some way for the reporting to be external to the organization, so that no politics are involved and it would be objective. I don't know if that's possible. That's the only thing I could add.
On May 28th, 2013. See this statement in context.