Skip to content

Onye ahịa ma ọ bụ onye were gị n'ọrụ na-arịọ ka ị mee ihe iwu na-akwadoghị: Kwuo ndekọ ego ụgha, zoo mmebi data, ma ọ bụ njikwa nchekwa, ọjụjụ, akwụkwọ, na ndụmọdụ.

Nọmba mberede dị iche na mba. Ibe a na-eji 911, nọmba maka United States na Canada. Ọtụtụ mba ndị ọzọ na-eji 112, 999, ma ọ bụ nọmba ọzọ. Chọta nọmba maka obodo gị.

Otu n'ime ihe mberede iwu kachasị elu nke onye ọrụ dịpụrụ adịpụ, onye injinia software, onye na-edekọ ego, onye na-ahụ maka nrubeisi, ma ọ bụ onye ọrụ nkwekọrịta nwere onwe ya nwere ike iche ihu mgbe onye njikwa, onye isi ụlọ ọrụ, ma ọ bụ onye ahịa nyere gị iwu ka ị mee ihe iwu na-akwadoghị: iweghachite nkwekọrịta ego na-enweta ego n'ịkwalite ego kwa afọ.18 U.S.C. § 1343 Wire Fraud / Sarbanes-Oxley Section 802), na-ehichapụ ndekọ ihe nkesa na nzuzo ma ọ bụ na-ezochi mmebi data ransomware/PII n'aka ndị nchịkwa na ndị ahịa (FTC Act Section 5 / GDPR Article 33 / former CISO criminal prosecution precedent), na-ebuga koodu na-ewepụ nchekwa, nzuzo, ma ọ bụ njikwa ikuku, ma ọ bụ na-akọwahie akwụkwọ ndekọ ụgwọ/ụtụ isi. Mgbe onye isi na-enye ntuziaka iwu na-akwadoghị, ọ fọrọ nke nta ka ọ bụrụ mgbe niile na-ebuga ya ** n'okwu ọnụ maka mbugharị, otu, ma ọ bụ oku ekwentị enweghị ndekọ** (or in an ephemeral Slack huddle) mgbe ị na-arụgide gị ime mgbanwe n'okpuru Git nke gị onwe gị, nzere nchekwa data, ma ọ bụ nbanye akaụntụ n'ime elekere.

Otu echiche na-ezighị ezi kachasị dị ize ndụ na iwu mpụ ọcha na teknụzụ bụ ikwere na " Enweghị m ike ịkpe ikpe n'ihi na abụ m onye ọrụ ma ọ bụ onye ọrụ nkwekọrịta na-agbaso iwu onye isi m." N'okpuru iwu gọọmenti etiti United States (18 U.S.C. § 2: Principals / Aiding and Abetting na 18 U.S.C. § 371: Conspiracy), Iwu United Kingdom (Fraud Act 2006 na Accessories and Abettors Act 1861), na koodu mpụ ndị otu European Union, *"iwu kachasị elu" bụ ihe nchebe efu maka mpụ. Nke ka njọ, n'ihi na nzere dijitalụ gị (your GitHub SSH key, AWS IAM user, ERP login, or Docusign signature) jikọtara ya na mmezu nke ntuziaka ahụ ebe ihe onye isi na-achọ bụ naanị ọnụ, ** ị ga-abụ onye a na-enyo enyo na mbụ (the "fall guy" * oge ndị na-enyocha mpụ, ndị na-achịkwa, ma ọ bụ ndị mmanye iwu ga-anata akwụkwọ ndekọ sistemụ. Ọ bụrụ na ị na-eche ihe iyi egwu nke ime ihe ike ma ọ bụ ịpụnaara mmadụ ihe ozugbo, kpọọ nọmba mberede mpaghara gị (911 na United States na Canada, 112 gburugburu European Union, 999 na United Kingdom) site na anyị nọmba mberede akwụkwọ ndekọ aha ozugbo, ma nyochaa ntuziaka nsogbu ime ime ihe metụtara anyị na-ezigara akwụkwọ ozi nzuzo nzuzo, PII ahịa, ma ọ bụ akwụkwọ akụkọ HIPAA na mberede, ngwanrọ nlekota onye ọrụ ("bossware") na kọmputa BYOD nkeonwe, na Onye ahịa ma ọ bụ onye were n'ọrụ insolvency na mberede na akpọchi Slack/email.

Mee nke a ugbu a

  1. Emela ntuziaka iwu na-akwadoghị, emetụla "jikota," abanyela n'akwụkwọ a gbanwere, ma ihichapụla ndekọ ọ bụla ma ọ bụ ozi-e ("spoliation of evidence"). N'okpuru. 18 U.S.C. § 1519 (Sarbanes-Oxley Obstruction), ibibi ma ọ bụ gbanwee otu faịlụ ndekọ ma ọ bụ email iji kpuchie okwu bụ ihe kwụ ọtọ 20-year Mpụ gọọmenti etiti dị mfe maka ndị na-agba akwụkwọ iji gosi karịa mmejọ ndị dị n'okpuru.
  2. ** Zụta oge awa 24 ozugbo na-amaliteghị arụmụka okwu mgbawa na oku ahụ.** Ọ bụrụ na agbadoro ya na mbugharị ndụ ma ọ bụ oku ekwentị, were nwayọ kwuo: "Achọrọ m ijide n'aka na enwere m nkọwa teknụzụ / akaụntụ ozugbo tupu imetụ mmepụta ahụ aka; biko zitere m arịrịọ ahụ na email (ma ọ bụ tiketi Jira), m ga-enyocha nrubeisi chọrọ ozugbo."
  3. ** Zipụ "Email Memorialization na nkọwapụta nke oge a" (The Paper-Trail Shield) ozugbo okwu ọ bụla gachara.** N'ime 15 minutes nke ntụziaka ọnụ, zigara onye nyere iwu ozi email na-achịkọta kpọmkwem ihe ha gwara gị ka mee ma rịọ ha ka ha kwenye na ederede (see exact word-for-word templates in Part 2). Ugboro itoolu n'ime iri, onye njikwa rụrụ arụ ga-ala azụ ozugbo kama ịza "Ee, biko mebie iwu" na ozi-e nwere ike ịchọpụta.
  4. ** Chekwaa nzọ ọjụjụ gị na ngwaọrụ onye ọrụ gị enweghị ike ihichapụ ozugbo (without stealing proprietary source code or trade secrets)** Ọ bụrụ na ị na-edobe naanị ihe akaebe n'ime igbe mbata ụlọ ọrụ Slack ma ọ bụ Google Workspace/Microsoft 365, IT nwere ike igbachi laptọọpụ gị wee kpochapụ akaụntụ gị na 30 seconds. Bugharịa ma ọ bụ BCC email jụrụ gị (or photograph the screen with your personal smartphone camera) ka ị na-agbasosi ike na ** HIPAA / Trade Secret Whistleblower Safe Harbor (18 U.S.C. § 1833(b)*** iwu na Nkebi nke 3.
  5. Cheta ọnyà ndụmọdụ ụlọ ọrụ (Upjohn WarningIhe onwunwe nke ụlọ ọrụ gị (HR) ngalaba na In-House General Ndụmọdụ na-anọchite anya CORPORATION, Ọ BỤGHỊ gị onwe gị. Tupu ịbanye n'ime HR ma ọ bụ ngalaba iwu ụlọ ọrụ iji kwupụta ma ọ bụ bo onye isi ala ebubo mpụ, depụta akwụkwọ nzuzo. 60-minute Ndụmọdụ ya na ** onye na-akwụ ụgwọ nọọrọ onwe ya na-arụ ọrụ / onye ọka iwu Whistleblower (or White-Collar Defense Counsel*** onye ji 100% onye ọka iwu-onye ahịa ihe ùgwù nye naanị gị.
  6. ** Dezie nkwupụta nke ime / mpụta echekwabara tupu ha achụ gị ọkụ (Statutory Retaliation Lock.** N'okpuru Sarbanes-Oxley (18 U.S.C. § 1514A), Dodd-Frank (15 U.S.C. § 78u-6), Ngalaba OSHA 11(c), UK Public Interest Disclosure Act 1998 (PIDA), na nke EU Whistleblowing Directive (2019/1937), na-etinye nkwenye ezi uche dị na ya maka mmebi iwu na ndekọ ** tupu ** nkwụsịtụ na-ebufe ibu iwu n'elu onye were gị n'ọrụ wee mepee ụgwọ azụ azụ okpukpu abụọ, ntinyeghachi, na ego nchịkwa.

Danger

** Ihe ngosi "CISO / Engineer Fall Guy": Ihe kpatara na-ezobe mmebi data ma ọ bụ na-ebuga koodu aghụghọ nwere ike iziga gị n'ụlọ mkpọrọ Federal.** Ebe ọ bụ na ikpe ndị omempụ gọọmenti etiti mara ọkwa nke ndị isi nchekwa ụlọ ọrụ na ndị injinia software (such as the federal prosecution of Uber's former Chief Security Officer under 18 U.S.C. § 1505 & § 4 for concealing a data breach via a disguised bug-bounty NDA, and the criminal convictions of Volkswagen software engineers who coded the emissions defeat device after managers told them to do it), Ngalaba Ikpe Ziri Ezi nke U.S.DOJ) na ndị na-achịkwa ụwa na-arụsi ọrụ ike ikpe ** ndị ọrụ nka na ụzụ na ego n'otu n'otu *** na-eme ihe mkpuchi. Anabatala mmesi obi ike nke onye njikwa na "Legal abanyelarị na nke a" ma ọ bụ "Ana m arụ ọrụ zuru oke": ọ gwụla ma onye ndụmọdụ izugbe nke ụlọ ọrụ ahụ ezitere gị akwụkwọ ikike, bịanyere aka na nkwenye iwu ozugbo site na adreesị ozi-e ụlọ ọrụ ha na-akwado kpọmkwem ihe omume ahụ ziri ezi, ** emetụla ahụigodo ***.

Osisi mkpebi: Nzaghachi n'ụzọ aghụghọ mgbe enyere iwu ka o mee iwu ezighi ezi ma ọ bụ aghụghọ

Soro usoro nchekwa nchekwa nke iwu na arụ ọrụ ka iwepụ ntuziaka na-akwadoghị ka ị na-echekwa ihe eji ebi ndụ na nnwere onwe gị.

flowchart TD
    A["Onye were gị n'ọrụ, onye isi, ma ọ bụ onye ahịa chọrọ ka ịmee iwu na-ezighi ezi ma ọ bụ aghụghọ"] --> B["Kwụsị: Emela mgbanwe a, abanyela, ma ihichapụla ndekọ ma ọ bụ ndekọ ọ bụla."]
    B --> C{"Kedu ka esi wegara gị ihe a chọrọ?"}
    C -->|"A. N'okwu ọnụ na mbugharị / oku ekwentị / n'ime mmadụ"| D["Kwụsị & tụgharịa ka ọ dee: Zipụ 'Email nkọwa na nkwenye' dị mma na-achịkọta ntuziaka ziri ezi"]
    C -->|"B. Na Edemede (Slack / Email / Jira Tiketi)"| E["Weghara ihe akaebe na-anọghị n'ịntanetị (Foto Smartphone nke ihuenyo + nkụnye eji isi mee) tupu enwee ike dezie/ehichapụ ozi"]
    D --> F{"Kedu ka onye njikwa / onye ahịa si anabata arịrịọ nkwenye ederede gị?"}
    F -->|"1. Ha laghachi azụ ('Enweghị uche, ghọtahiere')"| G["Chekwaa eriri email na-anọghị n'ịntanetị dị ka mkpuchi megide mmegwara ọdịnihu -> Gaa n'ihu n'ọrụ iwu kwadoro"]
    F -->|"2. Ha jụrụ itinye ya n'akwụkwọ & Achọrọ ime ngwa ngwa"| H["Wepụta akwụkwọ edebere 'Ọjụjụ Nkwekọrịta nke Okwukwe Dị Mma' na-ehota ụkpụrụ akọwapụtara / amụma / njikwa nyocha."]
    E --> H
    H --> I{"Kedu ụdị omume iwu na-akwadoghị ka a na-achọ?"}
    I -->|"Aghụghọ gbasara ego / ndekọ ego, ego a na-enweta adịgboroja, nchụpụ ụtụ isi, ma ọ bụ aghụghọ ndị ọchụnta ego"| J["Kpọtụrụ Ndụmọdụ Whistleblower -> Balite na kọmitii nyocha nke Board & Faịlụ SEC TCR / IRS Ụdị 211 / SOX 806"]
    I -->|"Izochie mmebi data, ịgha ụgha nye ndị nyocha/FTC/GDPR, ma ọ bụ ihichapụ ihe akaebe."| K["Jụ nhụsianya (18 USC 1519) -> Chekwaa ndekọ n'ime nchekwa WORM na-adịghị agbanwe agbanwe -> Gaa na ndụmọdụ Cyber/Whistleblower"]
    I -->|"Ihe ize ndụ nchekwa, Mmebi OSHA, Aghụghọ Ahụike/FDA, ma ọ bụ mkpofu gburugburu"| L["Faịlụ nzuzo OSHA Whistleblower / Iwu nkwupụta ụgha (Qui Tam) / mkpesa nchekwa iwu"]

Akụkụ 1: Ntuziaka iwu na-akwadoghị nke nwere nnukwu ihe ize ndụ na ọrụ dịpụrụ adịpụ na teknụzụ: Kedu iwu ndị a na-emebi n'ezie?

Tupu idee ozi-e jụrụ gị, chọpụta kpọmkwem ahịrị iwu na usoro nke onye were gị n'ọrụ ma ọ bụ onye ahịa gị na-arịọ gị ka ịgafe. Na-ehota ụkpụrụ nnabata ebumnuche (rather than making emotional accusations) bụ ihe na-ebute nchebe nke onye na-ekwu okwu n'iwu.

Achọrọ onye were n'ọrụ / onye ahịa iwu na-akwadoghị Ihe ndapụta Ime-ọrụ nkịtị Emebiri iwu mpụ nke isi na iwu obodo (US / UK / EU) Ihe ize ndụ nke ụgwọ ọrụ nkeonwe ma ọ bụrụ na i mee ya Ọwa na-akọ akụkọ echedoro
1. Ndekọ ndekọ ego na-agha ụgha, nkwekọrịta azụghachi azụ, ma ọ bụ ntọlite ​​mkpụrụ ego maka ndị na-etinye ego / ndị na-agbazinye ego - Ịgbanwe ụbọchị akwụkwọ ọnụahịa ma ọ bụ ịmata ego enwetaghị ego (channel stuffing)
- Na-edezi nọmba onye ọrụ/ARR na ọkwa ọkwa ma ọ bụ akụkọ ọgbụgba ndụ ụlọ akụ
- Idobe akwụkwọ edemede abụọ
US: 18 U.S.C. § 1343 (Wire Fraud), 18 U.S.C. § 1350 / SOX § 802, Securities Act Rule 10b-5
UK: Fraud Act 2006 (s.2 False Representation) & Theft Act 1968 (s.17 False Accounting)
** Oke: *** Ndị na-ahụ maka ego, ndị njikwa ego na ndị nyocha data bụ ndị na-ewepụta akụkọ ndị ọchụnta ego/onye na-agbazinye ego adịgboroja na-ebo ebubo mgbe niile n'akụkụ ndị isi maka nkata aghụghọ waya. ** US: *** Ụlọ ọrụ SEC nke onye nkwutọ (whistleblower)Form TCR), OSHA Sarbanes-Oxley (SOX § 806, kọmitii nyocha nke bọọdụ
* UK: *** FCA Whistleblowing / Ọfịs Wayo siri ike (SFO)
2. Izochi ndabi data, ihichapụ ndekọ mbanye, ma ọ bụ ịkwụ ụgwọ Ransomware dị ka "Enweta ahụhụ" - Nye iwu DevOps/SecOps ka rm -rf ndekọ ihe nkesa mebiri emebi
- Ịgwa ndị ahịa/ndị na-achịkwa "ọnweghị PII enwetara" mgbe mkpofu nchekwa data mere
- Ịgha ụgha SOC 2, PCI-DSS, ma ọ bụ HIPAA nyocha nseta ihuenyo
US: 18 U.S.C. § 1519 (Obstruction/Destruction of Records), 18 U.S.C. § 4 (Misprision of Felony), FTC Act § 5, SEC Cybersecurity Disclosure Rule, HIPAA
EU/UK: GDPR Art. 33 & 34 (72-Hour Breach Notice), NIS2 Directive
** Oke: *** Ihichapụ ndekọ mgbe mmebi ma ọ bụ ihe nchekwa na-arụ ọrụ ** mmechi nke ikpe ziri ezi (mpụ)spoliation)**. A mara ndị CISO n'otu n'otu na ndị injinia ikpe n'ụzọ mpụ maka nkpuchi mkpuchi. ** US: *** FTC, SEC, HHS OCR (HIPAA), CISA, Ọchịchị Attorney General
EU/UK: Ndị ikike nchekwa data nke mba (ICO na UK, CNIL, BfDI) n'okpuru GDPR & EU Directive 2019/1937
3. Na-ebuga "ngwaọrụ meriri," na-agafe njikwa nchekwa, ma ọ bụ data ndị asọmpi na-ezu ohi - Koodu ederede nke na-achọpụta nnwale/ndị na-enyocha iwu na-agbanwe omume
- Na-agafe nyocha ka ihichapụ nchekwa data nke onye asọmpi
- Ịgbanyụ ngwaọrụ ahụike, ụgbọ elu, ma ọ bụ ihe mgbochi nchekwa ụlọ ọrụ
US: 18 U.S.C. § 1030 (Computer Fraud and Abuse Act: CFAA), 18 U.S.C. § 1832 (Theft of Trade Secrets), OSHA Act, FDA / FAA / EPA ụkpụrụ
UK: Computer Misuse Act 1990
** Elu: *** Ide edemede na-agafe njikwa ịnweta teknụzụ na-emebi iwu CFAA na Computer Misuse Act, na-ekpughere onye mmemme n'otu n'otu na ebubo ntinye kọmputa nke obodo na ndị omempụ. ** US: *** Ngalaba mpụ DOJ, Mmemme Whistleblower OSHA (whistleblowers.gov), FAA/FDA/EPA hotline
** UK/EU:** Onye isi ahụike na nchekwa (HSE) / National Competent Authority
4. Aghụghọ nkwekọrịta gọọmentị, ntinye akwụkwọ ịgba ụgwọ ọgwụ, ma ọ bụ kaadị oge inye onyinye ụgha - Enyemaka gọọmentị etiti/steeti ịgba ụgwọ ma ọ bụ nkwekọrịta nchekwa maka awa anaghị arụ ọrụ
- Na-agbanwe EHR software ma ọ bụ koodu ịgba ụgwọ ahụike (CPT/ICD-10) iji kwụọ ụgwọ Medicare/Medicaid
** US: ** ** Iwu nkwupụta ụgha (31 U.S.C. § 3729: Obodo & 18 U.S.C. § 287: Onye omekome)**, Iwu Mgbochi Kickback (42 U.S.C. § 1320a-7b) ** Elu nke ukwuu: *** Ịnyefe ma ọ bụ idebe nkwupụta ụgha n'aka ụlọ ọrụ gọọmentị na-akpalite treble (3x) mmebi gbakwunyere $13,946 to $27,894 kwa ebubo ụgha. ** US: ** ** Iwu nkwupụta ụgha * Qui Tam * ikpe (31 U.S.C. § 3730(b)*** gbara akwụkwọ n'okpuru akara site na onye ọka iwu Qui Tam * (pays 15% to 30% of recovered government funds + § 3730(h) mgbochi mmegwara)
5. Nkwụghachi ụgwọ akwụ ụgwọ ezighi ezi, ịpụpụ ụtụ isi, omume enwetaghị ikike, ma ọ bụ nchụpụ mmachi/Mbupu Mbupu - Ndị ọrụ na-akwụ ụgwọ "n'okpuru tebụl" ma ọ bụ ụgha W-2 / 1099 / I-9 ihe ndekọ
- Mbupu software / ngwaike ma ọ bụ imeghe akaụntụ maka ụlọ ọrụ kwadoro (OFAC / ITAR / EAR)
US: 26 U.S.C. § 7201 / § 6672 (Trust Fund Recovery Penalty), IEEPA / OFAC Sanctions (50 U.S.C. § 1705)
UK: Criminal Finances Act 2017
** Elu: *** N'okpuru IRC § 6672, onye ọrụ ọ bụla na-ahụ maka ego nwere ikike nbanye ma ọ bụ ikike ịkwụ ụgwọ nke kpachaara anya na-ewepụ ụtụ isi ụgwọ ọrụ nwere ike ijide **100% n'onwe ya ga-akwụ ụgwọ *** maka ụtụ ụlọ ọrụ akwụghị ụgwọ. ** US: ** ** ụlọ ọrụ Whistleblower (IRS)Form 211*, FinCEN AML Whistleblower Programme, Azụmahịa ** BIS / OFAC *** nkwupụta afọ ofufo
UK: *** HMRC Online Hotline aghụghọ

Part 2: Nzọụkwụ-site-nzọụkwụ Ọjụjụ Protocol & Okwu-maka-Okwu Email Templates (The Paper-Trail Shield)

Mgbe onye were gị n'ọrụ ma ọ bụ onye ahịa gwara gị ka ịmee ihe iwu na-akwadoghị, ebumnuche gị na mbụ 24 hours bụ okpukpu abụọ: ** (1) emela ihe megidere iwu na-akwadoghị ***, yana ** (2) ịmanye ihe a chọrọ n'ime ndekọ ederede ebe ị na-ekwupụta "nkwenye ezi uche dị na ya" na omume ahụ megidere otu iwu, iwu, ma ọ bụ ụkpụrụ ***.

Gịnị mere nzọụkwụ nke abụọ ahụ ji dị ezigbo mkpa? N'okpuru iwu gọọmentị etiti na nke steeti (such as Sarbanes-Oxley Section 806 and state wrongful-termination-in-violation-of-public-policy laws), ịgaghị ** agaghị egosi n'ụlọ ikpe na onye were gị n'ọrụ mere mpụ; naanị ị ga-egosipụta na **ị kwuputara ezi okwukwe, ezi ezi uche na omume nke a rịọrọ megidere iwu ma ọ bụ ụkpụrụ, yana onye were gị n'ọrụ megwara gị megwara gị.

+-----------------------------------------------------------------------------+
|     THE 3-STEP PAPER-TRAIL SHIELD AGAINST VERBAL ILLEGAL DIRECTIVES         |
+-----------------------------------------------------------------------------+
|                                                                             |
|  [ STEP 1: THE LIVE VERBAL DEFLECTION (During Zoom / Phone Call) ]          |
|    Manager: "Don't put this in an email, just change the Q3 date /          |
|              wipe that access log before the auditor logs in at 3 PM."      |
|    You:     "I want to make sure I don't break the schema or audit trail    |
|              by accident. Let me pull up the exact record and send you a    |
|              quick note to confirm the parameters before I run anything."   |
|                                   |                                         |
|                                   v (Within 15 Minutes of Hanging Up)       |
|  [ STEP 2: THE CONTEMPORANEOUS MEMORIALIZATION EMAIL (Polite Trap) ]        |
|    - Summarizes the verbal directive neutrally in writing                   |
|    - Cites the specific compliance/legal rule it conflicts with             |
|    - Asks the manager (or Legal/Compliance) for explicit written sign-off   |
|                                   |                                         |
|        +--------------------------+--------------------------+              |
|        v (90% of Cases: They Back Down)                      v (10%: Push)  |
|  Manager replies: "Hold off on that"        Manager orders you again or     |
|  or calls angrily saying "Why did           threatens firing -> Send        |
|  you email that?" -> DO NOT execute;       STEP 3: Formal Protected        |
|  preserve the email offline.                Compliance Refusal & Escalate   |
+-----------------------------------------------------------------------------+

Template 1: Email "Innocent Clarification & Memorialization"Send Within 15 Minutes of a Verbal Demand)

Jiri ndebiri na-abụghị nke esemokwu ozugbo onye njikwa ma ọ bụ onye ahịa gwara gị ka ịmee ihe na-enyo enyo. Ọ na-akpọchi usoro okwu ha ka ọ bụrụ ndekọ ederede oge ka ọ na-enye ha mgbago nchekwa ihu ka ha laghachi azụ:

** Isiokwu: ** Nkwenye arịrịọ na-esochi anyị [Time, e.g., 2:15 PM] kpọọ: [Project / Account / Audit Name]

ndewo [Manager/Client Name],

Na-esochi mkparịta ụka anyị ugbu a na [2:15 PM], Achọrọ m ijide n'aka na m ghọtara ntụziaka gị nke ọma tupu ịme mgbanwe ọ bụla [the Q3 revenue ledger / the production access logs / the customer breach notification / the SOC 2 evidence package].

Site na oku anyị, ị gwara m [describe the exact action neutrally and specifically: e.g., change the contract execution date on Invoice #4082 from October 4 to September 28 so it books in Q3 / delete the authentication error logs from Server-Prod-04 prior to the external audit / omit the unauthorized database export from the client incident summary].

N'ihi na [modifying executed invoice dates / deleting production security logs during an active inquiry / omitting confirmed exfiltration of personal data] na-egosi na ọ na-emegide [our GAAP revenue recognition controls and Sarbanes-Oxley / SEC audit requirements / GDPR Article 33 and FTC breach disclosure rules / our SOC 2 compliance policies], Enweghị m ike ịme mgbanwe a n'okpuru nzere m na-enweghị nkwenye ederede site na [Legal / Compliance / our external CPA] na-akwado na omume a kwekọrọ n'iwu dị.

Biko zaghachi iji gosi ma ọ bụrụ na ị ka chọrọ ka m gbasaa arịrịọ a [Legal / Compliance / the Audit Committee] maka ikike ederede, ma ọ bụ mee ka m mara ma anyị ga-ahapụ ya [records / logs / report] agbanwebeghị.

Ekele kacha mma, [Your Name & Title]

Àtụ 2: Ọjụjụ a na-anabataghị nke ọma "Nchekwado Whistleblower" (If They Pressure You Again or Threaten Termination)

Ọ bụrụ na onye njikwa zaa iwe iwe (or calls you back screaming "Don't email me, just do it or you're fired."), emela ** echegbula. Ziga ozi-e nke abụọ a ozugbo (copying Chief Legal Officer / Compliance / HR if appropriate after consulting counsel, and preserving an offline copy):

** Isiokwu:** Ọkwa nrubeisi & Ọjụjụ ntuziaka: [Project / System Name]

ndewo [Manager Name],

Soro oku ekwentị nke abụọ anyị taa na [Time], nke i nyere m iwu ka m ghara ide ihe a n’akwụkwọ ma kwuo ya [my role/contract would be terminated if I did not immediately modify the financial records / delete the breach logs / deploy the bypass code], Ana m ede akwụkwọ ka m detuo ọnọdụ m n'ụzọ iwu.

Enwere m ezi okwukwe, nkwenye ezi uche dị na ya na-emezu ntụziaka gị [state exact action] ga-abụ mmebi nke [cite specific law: e.g., federal wire/accounting fraud statutes (18 U.S.C. § 1343 / § 1519), SEC / FTC / GDPR data breach regulations, or OSHA safety standards].

N'ihi ya, m ga-eji nkwanye ùgwù jụ imezu ntụziaka ahụ kpọmkwem, agaghị m agbanwe, megharịa ma ọ bụ hichapụ ndekọ ma ọ bụ ndekọ ọ bụla. Adị m njikere ma dị njikere ịrụ ọrụ niile ziri ezi.

N'ezie, [Your Name & Title]


Nkebi nke 3: Idobe akaebe na-enweghị akwụkwọ mkpesa ma ọ bụ jide ya maka "ohi data" (18 U.S.C. § 1833(b) Ebe nchekwa)

Otu n'ime ụzọ aghụghọ kacha egbu egbu ndị na-ewe mmadụ n'ọrụ na-eji megide ndị nta akụkọ bụ "Trade Secret / CFAA Counter-Lawsuit": mgbe onye ọrụ chọpụtara aghụghọ, nbudata. 10 GB nke ọdụ data ụlọ ọrụ, koodu isi mmalite, na ndetu ndị ahịa na draịva USB nkeonwe ma ọ bụ Google Drive nkeonwe, wee chụrụ ya n'ọrụ, ndị ọka iwu ụlọ ọrụ ahụ gbara onye ọrụ ahụ akwụkwọ ozugbo (or refer them to the FBI) maka imebi iwu ** Computer Fraud and Abuse Act (CFAA, ** Chebe Iwu nzuzo azụmaahịa (DTSA, na ** Nkwekọrịta enweghị nkwupụta (NDA)**.

Soro usoro iwu anọ siri ike *** iji chekwaa ihe akaebe siri ike nke iwu iwu na-akwadoghị ** na-enyeghị onye were gị n'ọrụ ka ọ gbaa gị akwụkwọ maka izu ohi data:

1. Ihe Ị Kwesịrị Ịchekwa (The Refusal & Directive Trail)

Ịkwesịrị ịchekwa ihe akaebe nke ** ntuziaka iwu na-akwadoghị na ọjụjụ gị , gbakwunyere akụkọ ihe mere eme nke ọrụ gị dị ọcha (so the company cannot claim they fired you two days later for "poor performance"): 1. ** Nkwenye gị na ozi ịntanetị ọjụjụ nke oge a (with full SMTP email headers showing Date, Message-ID, From, and To). 2. ** nseta ihuenyo ma ọ bụ foto ekwentị *** nke Slack/Teams DM, tiketi Jira, ma ọ bụ email ebe onye njikwa gwara gị ka ị megharịa ndekọ ahụ, zoo mmebi ahụ, ma ọ bụ gafere njikwa ahụ. * (Ise foto nke ihuenyo nleba anya gị na ** igwefoto ama ama nkeonwe gị ** na-ahapụ ndekọ mbufe faịlụ efu efu na ụlọ ọrụ DLP.Data Loss Preventionsoftware dị ka CrowdStrike, Teramind, ma ọ bụ Zscaler)* 3. ** Memo-to-File nkeonwe nke oge a:** Mepee akwụkwọ na kọmputa gị ma ọ bụ ekwentị** (anaghị ejikọrọ na netwọkụ ụlọ ọrụ) wee detuo ụbọchị, oge, ndị bịara ya, na nkwuputa okwu ọnụ nke oku ọnụ ọ bụla ozugbo emechara, ziga ozi ahụ site na email nkeonwe gị na ** onye ọka iwu ọrụ nkeonwe** (labeling the subject line: "PRIVILEGED & CONFIDENTIAL: SEEKING LEGAL ADVICE"). 4. ** Nlebanya arụmọrụ gara aga, akwụkwọ ozi ego, na ọrụ / nkwekọrịta 1099:** Budata nlebanya arụmọrụ HR nke gị yana ozi-e otuto ugbu a tupu IT akpọchie laptọọpụ gị.

2. Ihe ị na-agaghị emeAvoiding Spoliation & Overbroad Data Dumping)

  • ** Ọ BỤGHỊ ebudata koodu isi mmalite nke ukwuu, ọdụ data PII ndị ahịa na-enweghị njikọ, ma ọ bụ nchekwa Google Drive dum ** gaa na mkpanaka USB ma ọ bụ akaụntụ igwe ojii nkeonwe.
  • ** Otu iwu Federal si echebe nkwupụta ezubere iche nye onye ọka iwu ma ọ bụ onye nchịkwa (The DTSA Whistleblower Immunity Shield: 18 U.S.C. § 1833(b)):**
    • N'okpuru ** chebe nzuzo nzuzo ahia (18 U.S.C. § 1833(b)(1)***, Congress weputara ** onye omekome zuru oke na ọdụ ụgbọ mmiri nchekwa nchekwa obodo ** na-emebi NDA nke ụlọ ọrụ niile: onye ** enweghị ike ijide ya n'ụzọ mpụ ma ọ bụ n'ụzọ nkịtị n'okpuru iwu nzuzo azụmaahịa gọọmentị etiti ma ọ bụ steeti ** maka ikpughe nzuzo azụmaahịa ma ọ bụ akwụkwọ nzuzo nzuzo ** na ntụkwasị obi nye onye ọrụ gọọmentị Federal, steeti ma ọ bụ mpaghara (directly or indirectly), ma ọ bụ onye ọka iwu, naanị maka ebumnuche ịkọ ma ọ bụ nyocha nke a na-enyo enyo megidere iwu **.
    • N'otu aka ahụ, n'okpuru SEC Iwu 21F-17(a), ọ bụ iwu na-akwadoghị *** ka onye ọ bụla were gị n'ọrụ manye nkwekọrịta nzuzo ma ọ bụ ịhapụ NDA iji gbochie gị ịkpakọrịta na SEC ozugbo.or OSHA, CFTC, FinCEN, and EEOC) gbasara ikike nchekwa ma ọ bụ mmebi iwu nwere ike ime.
    • ** Omume kachasị mma: *** Kama ịchekwa faịlụ ụlọ ọrụ na-arụ ọrụ na laptọọpụ ụlọ nkeonwe, buru ụzọ jide ** onye ọka iwu whistleblower *** ka onye ọka iwu gị kụziere gị ụkpụrụ nchekwa iwu ziri ezi (or ask corporate IT to place a formal "Litigation Hold" on the specific server logs in place).

Akụkụ 4: Ndị ọrụ nkwekọrịta nọọrọ onwe ha (1099 / B2B Freelancers) vs. Ndị ọrụ W-2: Ịkwụsị onye ahịa mebiri emebi na nchekwa

Ọ bụrụ na ị bụ ** onye nkwekọrịta nọọrọ onwe ya, onye nrụpụta onwe ya, CFO nke pere mpe, ma ọ bụ onye nwe ụlọ ọrụ** (rather than a W-2 employee) na onye ahịa na-achọ ka ị bulite sọftụwia pirated, kpochapu saịtị echedoro, mebie nọmba ụtụ / mbinye ego, ma ọ bụ zoo mmebi:

  1. ** Ndị ọrụ nkwekọrịta nọọrọ onwe ha ka na-ekpuchi ya site n'ụkpụrụ isi okwu ụgha:**
    • Na Lawson v. FMR LLC (571 U.S. 429 [2014]*, Ụlọikpe Kasị Elu nke United States kwuru na **Sarbanes-Oxley (SOX § 806) Nchekwa ụgha na-ekpuchi ndị ọrụ nkwekọrịta nọọrọ onwe ha, ndị na-arụ ọrụ n'okpuru ala, na ndị ndụmọdụ mpụga ** nke ụlọ ọrụ ọha.
    • ** Iwu nkwupụta ụgha (31 U.S.C. § 3730(h)*** na-echebe nke ọma "onye ọrụ ọ bụla, onye ọrụ nkwekọrịta, ma ọ bụ onye nnọchi anya" site na mmegwara maka ịjụ inye aka na nkwekọrịta gọọmentị ma ọ bụ aghụghọ ịgba ụgwọ ọgwụ.
  2. ** Kpọkuo nkuzi iwu na-akwadoghị (Restatement (Second) of Contracts § 178):**
    • Nkwekọrịta ma ọ bụ ọrụ ndị ahịa iji mee ihe megidere iwu na-akwadoghị bụ ** ihe efu megidere iwu ọha ***. Onye ahịa enweghị ike ịgba gị akwụkwọ nke ọma maka imebi nkwekọrịta n'ihi na ị jụrụ ịme wayo ma ọ bụ ntinye kọmputa.
    • Zipu akwụkwọ ozi ** ọkwa nkwusioru nke ọrụ maka enweghị nnabata iwu ***, akwụkwọ ọnụahịa maka ọrụ iwu kwadoro emechara ruo taa, yana ** kagbuo igodo API / nzere gị na gburugburu mmepụta ha ozugbo *** ka ha enweghị ike ịme ihe iwu na-akwadoghị n'okpuru akara ndị nrụpụta gị.

Warning

** Ghọta "Upjohn ịdọ aka ná ntị" Tupu ị na-agwa ụlọ ọrụ HR ma ọ bụ In-House Legal.** Ọ bụrụ na ị na-akọ banyere omume iwu na-akwadoghị nke onye isi na ụlọ ọrụ ** In-House General Counsel ma ọ bụ N'èzí Iwu Firm *** gbara gị ajụjụ ọnụ, ha ga-enye **Upjohn ịdọ aka ná ntị *** (Corporate Miranda): * "Anyị na-anọchite anya Ụlọ ọrụ ahụ, Ọ BỤGHỊ gị onwe gị. Onye ọka iwu-onye ahịa ihe ùgwù bụ naanị ụlọ ọrụ ahụ, nke nwere ike ịhapụ ya ma nyefee ihe niile ị gwara anyị na Ngalaba Ikpe Ziri Ezi iji chekwaa ụlọ ọrụ ahụ."

Tip

Rịkwaa arụkwaghịm Naanị Mgbe ndụmọdụ ndụmọdụ ("Mgbasa na-arụ ọrụ" vs. Mmebi mmegwara) Tupu izipu ihe "I quit" email, kpọtụrụ onye ọka iwu ọrụ. Ịhapụ afọ ofufo ozugbo na-eme ka ọ sie ike ịzọrọ ụgwọ ọrụ furu efu (as the employer argues you quit voluntarily). Na-eziga ** Template 2 (Formal Written Refusal to Perform the Unlawful Act while remaining ready to perform lawful duties*** na-amanye onye were gị n'ọrụ ka ọ laghachi azụ ma ọ bụ chụọ gị n'ọrụ (creating a clear Whistleblower Retaliation claim).


Iwu nchedo onye nkwuputa mpaghara yana ụlọ ọrụ mkpesa gọọmentị

Mpaghara / Obodo Onye nkwutọ nke izizi & Iwu mgbochi imegwara Nkwupụta gọọmentị gọọmentị na ọnụ ụzọ mbata Oge ngwụcha nke ntinye akwụkwọ iwu (Statute of Limitations)
United States Sarbanes-Oxley18 U.S.C. § 1514A, Dodd-Frank (15 U.S.C. § 78u-6, ** Iwu nkwupụta ụgha (31 U.S.C. § 3730(h), ** OSHA Whistleblower (29 statutes, DTSA (18 U.S.C. § 1833(b)*, & Iwu Mwepu na-ezighi ezi nke steeti (e.g., CA Labor Code § 1102.5) - OSHA onye na-ekwu okwu: whistleblowers.gov (1-800-321-6742)
- ** SEC (10%-30% Bounty):** sec.gov/whistleblower
- IRS15%-30% Bounty): irs.gov/compliance/whistleblower-office
- ** FinCEN (AML/Sanctions):** fincen.gov
** OKWU: *** ** Mmegwara nchekwa OSHA (Section 11c) bụ naanị 30 DAYS.** Sarbanes-Oxley (SOX) bụ 180 DAYS site na ụbọchị mmegwara. Egbula oge ịkpọtụrụ ndụmọdụ.
United Kingdom Iwu Nkpughe Mmasị Ọha 1998 (PIDA: Iwu ikike ọrụ 1996 Nkebi IVA, s.43A-43L) - ** chebe (UK Whistleblowing Charity Legal Advice Line):** 020 3117 2520 (protect-advice.org.uk)
- ACAS: 0300 123 1100
- ** ICO (Data Breaches):** 0303 123 1113
- FCA / SFO / HMRC
KWUO 3 MONTHS LESS 1 DAY site na ụbọchị nchụpụ ma ọ bụ mmebi iji malite ** ACAS Early Conciliation ** maka nkwupụta Ụlọikpe Ọrụ (Employment Tribunal)unlimited damages for PIDA whistleblowing dismissal).
European Union (EEA) ** Ntuziaka nhịahụ nke EU (Directive (EU) 2019/1937*** tụgharịrị n'ime iwu obodo (e.g., German HinSchG, French Sapin II / Waserman Law) Ọwa Mpụga Mpụga nke Mba (e.g., German BfJ, French Défenseur des droits, Irish Protected Disclosures Commissioner) & ** Ndị ọrụ nchekwa data (GDPR)** Weghachite ibu nke akaebe na onye were ya n'ọrụ: n'okpuru ** edemede 21(5), ozugbo onye ọrụ na-akọ akụkọ mmebi ma nwee mmerụ ahụ, iwu ** chere na mmebi ahụ bụ mmegwara iwu na-akwadoghị ma ọ bụrụ na onye were ya n'ọrụ gosipụtara na ọ bụghị.
Canada ** Koodu mpụ (s. 425.1: Mmegwara nke onye were n'ọrụ bụ mmejọ mpụ), ** Usoro ọrụ Canada, na Provincial Securities Whistleblower Programs (OSC na Ontario) - ** Ontario Securities CommissionOSC Whistleblower: ruo $5M award)**
- ** Ụlọ ọrụ asọmpi / mmemme ndị isi CRA **
- **Mịnịstrị na-ahụ maka ọrụ na mpaghara ***
Mmegwara onye were n'ọrụ maka inye ndị mmanye iwu ma ọ bụ ndị na-achịkwa ozi bụ mmejọ mpụ ** (up to 5 years imprisonment*** n'okpuru ** Nkebi 425.1 nke Canada Criminal Code ***.
Australia na New Zealand ** Australia: *** Iwu ụlọ ọrụ 2001 (Part 9.4AAA*** & ** Iwu nchịkwa ụtụ isi 1953
New Zealand:** Mkwupụta echedoro (nchebe nke ndị na-ekwu okwu) Iwu 2022
- ** Australia: *** ASIC (asic.gov.au*** ATO , & ** Ezi Ọrụ Commission (21-day dismissal deadline)
* New Zealand: ** ** Office nke Ombudsman (ombudsman.parliament.nz)**
Australia: A ga-etinyerịrị ngwa ịchụpụ nchekwa nchekwa na Fair Work Commission n'ime 21 CALENDAR DAYS nke nkwụsị; Corporations Act Mkpesa n'ụlọ ikpe whistleblower na-enye ụgwọ akwụghị ụgwọ na ntaramahụhụ obodo megide ụlọ ọrụ ahụ.

Ajụjụ a na-ajụkarị

Enwere m ike ijide m na mpụ ma ọ bụ n'onwe m ma ọ bụrụ na m na-agbaso iwu onye isi m ka m gbanwee ndekọ ma ọ bụ zoo mmebi?

Ee, kpam kpam. N'okpuru iwu gọọmenti etiti United States (`18 U.S.C. § 2 Aiding and Abetting` na `18 U.S.C. § 1519 Destruction or Alteration of Records`), Iwu United Kingdom (`Fraud Act 2006`), na koodu mpụ nke Europe, "M na-agbaso naanị iwu onye nlekọta" abụghị ihe nchebe iwu kwadoro maka mpụ ma ọ bụ mmebi iwu. Nke ka njọ, n'ihi na a na-edekọ nbanye dijitalụ nkeonwe gị, Git mbinye aka ma ọ bụ nzere ndekọ ego na ndekọ nyocha sistemụ ebe a na-enyekarị ntụziaka onye njikwa gị n'ọnụ, ndị na-achịkwa na ndị ọka iwu na-ebokarị onye injinia, onye na-edekọ ego, ma ọ bụ onye na-ahụ maka nnabata nke mere mgbanwe ahụ ma ọ bụ hichapụ ndekọ ahụ.

Kedu otu m ga-esi jụ arịrịọ iwu na-akwadoghị sitere n'aka onye isi m na-achụpụghị m maka "nsọpụrụ"?

Kama ịrụ ụka n'okwu ọnụ na oku, gbanwee mkparịta ụka ozugbo ka ọ bụrụ nkwanye ùgwù, nke e dere "imemorialization memorialization" n'ime nkeji iri na ise nke mkparịta ụka ahụ. Kpọkọtanụ kpọmkwem ihe onye njikwa gị gwara gị ka ị mee, kwuo nwayọọ na ị nwere ezi okwukwe na imezu ntụziaka ahụ na-enweghị nkwụsị nke iwu megidere otu iwu, ụkpụrụ ndekọ ego, ma ọ bụ usoro iwu chọrọ (`such as Sarbanes-Oxley, GDPR breach reporting rules, FTC regulations, or OSHA safety standards`), ma rịọ ha ka ha nweta ikike ederede site na ngalaba iwu ma ọ bụ nnabata nke ụlọ ọrụ mgbe ị na-akwado na ị dị njikere ịrụ ọrụ niile nke iwu kwadoro. Itinye nkwenye ezi uche dị na ya maka mmebi iwu n'ime ederede tupu ihe ọjọọ ọ bụla emee mkpọchi na nchedo mmegwara nke iwu kwadoro.

Onye were m ọrụ nwere ike gbaa m akwụkwọ maka imebi NDA m ma ọ bụrụ na m chekwaa ozi-e na-egosi na ha gwara m ka m mebie iwu ma ọ bụ gosi ha onye ọka iwu?

Mba, ọ bụrụhaala na ị na-agbaso iwu ọdụ ụgbọ mmiri dị mma na anaghị ebudata ọdụ data ụlọ ọrụ na-enweghị njikọ ma ọ bụ koodu isi mmalite. N'okpuru iwu US Defend Trade Secret Act (`18 U.S.C. § 1833(b)`), Iwu SEC Whistleblower (`Rule 21F-17`), Iwu Nkpughe Mmasị Ọha na UK (`PIDA Section 43J`), yana ntuziaka nhịahụ nke EU (`Article 21`), nkwekọrịta ọ bụla anaghị ekpughe (`NDA`) ma ọ bụ nkwekọrịta ọrụ bụ ihe efu n'ụzọ iwu ruo n'ókè ọ na-anwa igbochi gị ịkekọrịta ndekọ nzuzo na ntụkwasị obi n'aka onye ọka iwu nkeonwe gị ma ọ bụ onye na-ahụ maka gọọmentị naanị maka ịkọ akụkọ ma ọ bụ nyocha nke a na-enyo enyo na ọ dara iwu.

Ekwesịrị m ịkọrọ ndị ọrụ mmadụ (HR) ma ọ bụ ndụmọdụ gbasara iwu n'ime ụlọ ụlọ ọrụ iwu iwu na-akwadoghị onye isi m?

Tupu ịga na Ndụmọdụ ụlọ ọrụ HR ma ọ bụ In-House na mpụ dị elu ma ọ bụ ihe gbasara iwu, ị ga-ebu ụzọ kpọtụrụ onye ọka iwu nke onwe gị ma ọ bụ onye ọka iwu. Cheta na Human Resources na General Counsel nke ụlọ ọrụ na-anọchite anya ụlọ ọrụ ụlọ ọrụ, ọ bụghị gị onwe gị (`as explained in the standard Upjohn warning`), na isi ọrụ iwu kwadoro bụ ibelata ụgwọ maka ụlọ ọrụ ahụ. Onye ọka iwu na-akwụ ụgwọ nọọrọ onwe ya na-anọchite anya pasent 100 nke ọdịmma nke gị n'okpuru ikike onye ọka iwu na ikike ndị ahịa na ọ ga-adụ gị ọdụ ma ị ga-akọrọ otu oge na kọmitii nyocha nke onwe nke Board na onye na-ahụ maka mpụga (`such as the SEC, OSHA, IRS, or Data Protection Authority`) yabụ echekwabara nchedo iwu gị na ikike ị nweta nturu ugo.

Ntuziaka emetụtara

Isi mmalite na nduzi ọchịchị

  • ** U.S. Ngalaba Na-arụ Ọrụ: Nchekwa Ọrụ na Nlekọta Ahụike (OSHA Whistleblower Protection Program: whistleblowers.gov):** Mgbochi mmegwara nke iwu kwadoro gafere 25+ iwu gọọmenti etiti gụnyere Sarbanes-Oxley (18 U.S.C. § 1514A), Iwu mbụ onye na-atụ ụtụ isi, yana nchekwa ebe ọrụ.
  • ** U.S. Ụlọ ọrụ nchekwa na mgbanwe (SEC Office of the Whistleblower: 15 U.S.C. § 78u-6 & Rule 21F-17):*** Ntozu ihe nrite whistleblower (10% to 30%), Nzuzo, na mmachibido iwu na nkọwa Gag/NDA nke onye were were *.
  • ** Koodu United States (18 U.S.C. § 1519 Mgbochi mgbochi/Mgbochi & 18 U.S.C. § 1833(b) Chekwaa Iwu nzuzo nzuzo nke Whistleblower Immunity):** * ntaramahụhụ mpụ maka ibibi akwụkwọ nyocha/mebie ndekọ na ikike ikike maka nkwupụta nzuzo nye onye ọka iwu ma ọ bụ onye ọrụ gọọmentị*.
  • European Union (Directive (EU) 2019/1937 on the Protection of Persons Who Report Breaches of Union Law) & United Kingdom (Public Interest Disclosure Act 1998 / Employment Rights Act 1996 Part IVA): Atụgharịre ibu nke akaebe maka nkwughachi mmegwara na mwepu nke nkọwa gag nkwekọrịta.