Makasitomala kapena Wolemba Ntchito Akufuna Kuti Muchite Zina Zosaloledwa: Kunama Zolemba Zachuma, Bisani Kuphwanya Kwa Data, kapena Kuwongolera Chitetezo Chodutsa, Kukana, Zolemba, ndi Upangiri¶
Manambala angozi amasiyana malinga ndi dziko. Tsambali limagwiritsa ntchito 911, nambala ya United States ndi Canada. Mayiko ena ambiri amagwiritsa ntchito 112, 999, kapena nambala ina. Pezani nambala ya dziko lanu.
Chimodzi mwazamwazi zomwe munthu wantchito wakutali, injiniya wamapulogalamu, wowerengera ndalama, wogwirizira, kapena kontrakitala wodziyimira payekha angakumane nazo zimachitika pomwe manejala, wamkulu wa kampani, kapena kasitomala akukulamulani kuti muchite zinthu zosaloledwa: kubweza mgwirizano wobweza ndalama kuti muwonjezere phindu la kotala.18 U.S.C. § 1343 Wire Fraud / Sarbanes-Oxley Section 802), kuchotsa mwakachetechete zipika za seva kapena kubisa kuphwanya kwa data ya ransomware/PII kuchokera kwa owongolera ndi makasitomala (FTC Act Section 5 / GDPR Article 33 / former CISO criminal prosecution precedent), kutumizira khodi yomwe imalepheretsa chitetezo, chinsinsi, kapena kuwongolera kutulutsa mpweya, kapena kuyika molakwika zolemba zamalipiro/misonkho. Woyang'anira wamkulu akapereka lamulo losaloledwa, nthawi zonse amakapereka **mawu pa Zoom yosajambulidwa, Magulu, kapena foni ** (or in an ephemeral Slack huddle) ndikukukakamizani kuti musinthe zomwe mwachita pa Git, mbiri ya database, kapena kulowa muakaunti mkati mwa ola limodzi.
Lingaliro limodzi lowopsa kwambiri pamilandu yaupandu ndi laukadaulo ndikukhulupirira kuti "Sindingayimbidwe mlandu chifukwa ndimangokhala wantchito kapena kontrakitala wolipidwa ndikutsatira malamulo a abwana anga." Pansi pa malamulo a federal ku United States (18 U.S.C. § 2: Principals / Aiding and Abetting ndi 18 U.S.C. § 371: Conspiracy), malamulo aku United Kingdom (Fraud Act 2006 ndi Accessories and Abettors Act 1861), ndi zigawenga za mamembala a European Union, **"malamulo apamwamba" ndikudzitchinjiriza ku mlandu **. Choyipa kwambiri, chifukwa mbiri yanu ya digito (your GitHub SSH key, AWS IAM user, ERP login, or Docusign signature) amalumikizidwa ndi kukwaniritsidwa kwa malangizowo pomwe zofuna za mkuluyo zinali zapakamwa chabe, mumakhala wokayikira wamkulu wazamalamulo (the "fall guy") nthawi yomwe ma auditor akunja, owongolera, kapena okakamira malamulo amatumiza zolemba pamakina. Ngati mukukumana ndi chiopsezo cha nkhanza kapena kulanda, imbani nambala yanu yadzidzidzi yakudera lanu (911 ku United States ndi Canada, 112 ku European Union, 999 ku United Kingdom) kudzera mwa athu manambala angozi chikwatu nthawi yomweyo, ndikuwunikanso maupangiri athu okhudzana ndi zovuta zakutali mwangozi kutumiza maimelo olipidwa mwachinsinsi, kasitomala PII, kapena masamba a HIPAA, mapulogalamu oyang'anira olemba ntchito ("bossware") pamakompyuta anu a BYOD,ndi kasitomala kapena abwana kulephera mwadzidzidzi ndikutseka Slack / imelo.
Chitani izi tsopano¶
- MUSAMAGWIRITSE NTCHITO ZOCHITIKA ZOSANGALATSA, OSATI KUDANIZA "Gwirizanitsani," MUSAMAsainire chikalata chomwe chasinthidwa, ndipo OSATI kuchotsa zipika kapena maimelo aliwonse ("kusokoneza umboni"). Pansi pa
18 U.S.C. § 1519(Sarbanes-Oxley Obstruction), kuwononga kapena kusintha fayilo imodzi ya chipika kapena imelo kubisa nkhani ndizodziyimira20-yearFederal felony yomwe ndi yosavuta kuti ozenga mlandu atsimikizire kuposa mlandu womwe wayambitsa. - Gulani maola 24 nthawi yomweyo osayambitsa mkangano wapakamwa poimbira foniyo. Ngati mutakhala pa Zoom yamoyo kapena kuyimbira foni, nenani modekha kuti: "Ndikufuna kuonetsetsa kuti ndili ndi ukadaulo/akaunti yeniyeni ndisanagwire ntchito; chonde nditumizireni pempholi mu imelo (kapena tikiti ya Jira), ndipo ndiwunikanso zomwe ndimafunikira nthawi yomweyo."
- ** Tumizani "Contemporaneous Memorialization & Clarification Email" (
The Paper-Trail Shield) nthawi yomweyo pambuyo pofunsidwa ndi mawu.** Mkati15 minutesLangizo lapakamwa, tumizani imelo kwa munthu yemwe adapereka dongosololi mwachidule zomwe adangokufunsani kuti muchite ndikuwapempha kuti atsimikizire polemba (see exact word-for-word templates in Part 2). Kasanu ndi kamodzi mwa khumi, manijala achinyengo amabwerera nthawi yomweyo m'malo moyankha kuti "Inde, chonde phwanya lamulo" mu imelo yomwe ingapezeke. - ** Sungani njira yanu yokana pazida zomwe abwana anu SANGAKUFUPIRE kutali (
without stealing proprietary source code or trade secrets).** Mukangosunga umboni mkati mwa bokosi lanu la Slack kapena la Google Workspace/Microsoft 365, IT ikhoza kutseka laputopu yanu ndi kuchotsa akaunti yanu.30 seconds. Tumizani kapena BCC imelo yanu yakukana (or photograph the screen with your personal smartphone camera) pamene akutsatira mosamalitsa HIPAA / Trade Secret Whistleblower Safe Harbor (18 U.S.C. § 1833(b)) malamulo mu Gawo 3. - Kumbukirani Msampha Waupangiri Wakampani (
Upjohn Warning): Human Resources ya kampani yanu (HR) dipatimenti ndi In-House General Counsel amaimira CORPORATION, OSATI INU. Musanalowe kwa HR kapena dipatimenti ya zamalamulo ya kampani kuti muulule kapena kuimba mlandu CEO wamlandu, pezani chinsinsi.60-minutekukambirana ndi Woimira Wodziyimira pawokha Woyimira Ntchito / Whistleblower Loya (or White-Collar Defense Counsel) amene ali ndi ngongole100%loya-kasitomala mwayi kwa inu nokha. - Lembetsani zowululira zanu zotetezedwa zamkati/zakunja Asanakuthamangitseni (
Statutory Retaliation Lock). Pansi pa Sarbanes-Oxley (18 U.S.C. § 1514ADodd-Frank (15 U.S.C. § 78u-6), Gawo la OSHA11(c), UKPublic Interest Disclosure Act 1998 (PIDA), ndiEU Whistleblowing Directive (2019/1937), kuyika chikhulupiriro chanu cha kuphwanya malamulo*** musanachotsedwe ntchito kumasamutsira bwana wanu kubweza ngongole, kubwezeretsedwa, ndi kubweza ngongole zowirikiza kawiri.
Danger
Chiyambi cha "CISO / Engineer Fall Guy": Chifukwa Chake Kubisa Kuphwanya Chidziwitso Kapena Kutumiza Malamulo Achinyengo Kungakutumizeni ku Ndende ya Federal. Popeza kuti akuluakulu aboma akukhudzidwa ndi milandu yazachitetezo chamakampani ndi akatswiri opanga mapulogalamu (such as the federal prosecution of Uber's former Chief Security Officer under 18 U.S.C. § 1505 & § 4 for concealing a data breach via a disguised bug-bounty NDA, and the criminal convictions of Volkswagen software engineers who coded the emissions defeat device after managers told them to do it), U.S. Department of Justice (DOJ) ndi oyang'anira padziko lonse lapansi amazenga milandu **payekha ogwira ntchito zaukadaulo ndi azachuma ** omwe amabisa zinthu zobisika. Musavomereze chitsimikizo chapakamwa cha manejala kuti "Mwalamulo wasainidwa kale pa izi" kapena "Nditenga udindo wonse": pokhapokha ngati Mlangizi Waukulu wa kampaniyo akutumizirani malingaliro ovomerezeka, osayinidwa mwachindunji kuchokera ku adilesi yawo yakampani yotsimikizira kuti zomwe akuchitazo ndi zololeka, osakhudza kiyibodi.
Mtengo wosankha: Kuyankha Mwanzeru Mukalamulidwa Kuchita Zosavomerezeka Kapena Zachinyengo¶
Tsatirani ndondomeko yachitetezo yovomerezeka iyi kuti muchepetse lamulo losaloledwa ndikuteteza moyo wanu komanso ufulu wanu.
flowchart TD
A["Wolemba ntchito, Woyang'anira, kapena Wokasitomala Akufuna Kuti Muchite Lamulo Lomwe Lingakhale Losaloledwa kapena Lachinyengo"] --> B["IMANI: OSACHITA Kusintha, OSAsainira, ndipo OSATI KUFUTA Logos kapena Zolemba"]
B --> C{"Kodi zomwe mukufuna zidaperekedwa kwa inu bwanji?"}
C -->|"A. Pamawu pa Zoom / Phone Call / Mu-Munthu"| D["Imani Kaye & Sinthani Kulemba: Tumizani Mwaulemu 'Kufotokozera & Kutsimikizira Imelo' Kufotokozera mwachidule Directive Yeniyeni"]
C -->|"B. Polemba (Slack / Imelo / Tikiti ya Jira)"| E["Jambulani Umboni Wapaintaneti Wopanda Nthawi (Chithunzi cha Smartphone cha Screen + Mitu) Uthenga Usanasinthidwe/Kuchotsedwa"]
D --> F{"Kodi Woyang'anira / Wokasitomala amayankha bwanji pempho lanu lotsimikizira zolembedwa?"}
F -->|"1. Amabwerera Mmbuyo ('Osadandaula, sanamvetsedwe')"| G["Sungani Imelo Imelo Offline ngati Inshuwaransi Pobwezera M'tsogolo -> Pitilizani Ntchito Zachizolowezi"]
F -->|"2. Amakana Kuyilemba & Kufuna Kuchitapo Mwamsanga"| H["Nkhani Yolembedwa Mwachikhulupiriro 'Kukana Kutsatira Chikhulupiriro Chabwino' Potchula Lamulo / Ndondomeko / Kuwongolera Kuwerengera"]
E --> H
H --> I{"Ndi mtundu wanji wa khalidwe losaloledwa?"}
I -->|"Zachinyengo Zachuma / Zowerengera, Ndalama Zabodza, Kuzemba Misonkho, kapena Chinyengo kwa Ogulitsa"| J["Funsani Whistleblower Counsel -> Pitani ku Board Audit Committee & Fayilo SEC TCR / IRS Form 211 / SOX 806"]
I -->|"Kubisa Kuphwanya Kwa Data, Kunama kwa Auditors/FTC/GDPR, kapena Kuchotsa Umboni"| K["Refuse Spoliation (18 USC 1519) -> Sungani Zipika mu Malo Osasinthika WORM -> Funsani Uphungu wa Cyber/Whistleblower"]
I -->|"Chiwopsezo cha Chitetezo, Kuphwanya kwa OSHA, Chinyengo cha Medical/FDA, kapena Kutaya kwachilengedwe"| L["Fayilo Yachinsinsi ya OSHA Whistleblower / False Claims Act (Qui Tam) / Regulatory Safety Report"]
Gawo 1: Malangizo Opanda Chiwopsezo Chambiri pa Ntchito Yakutali & Chatekinoloje: Ndi Malamulo Ati Amene Akuphwanyidwa Kwenikweni?¶
Musanalembe imelo yanu yokana, zindikirani mzere wokhazikika komanso wowongolera omwe abwana anu kapena kasitomala akukupemphani kuti muwoloke. Kutchula mulingo wotsatira (rather than making emotional accusations) ndizomwe zimayambitsa chitetezo chalamulo.
| Kufuna Kwakasitomala Osaloledwa | Zochitika Zodziwika Zakutali | Milandu Yoyamba & Malamulo Akuphwanyidwa (US / UK / EU) |
Chiwopsezo cha Ngongole Yawekha Ngati Mukumvera | Wotetezedwa Wowhistleblower & Njira Yofotokozera |
|---|---|---|---|---|
| 1. Kunamiza Zolemba Zazachuma, Mapangano Obwerera M'mbuyo, kapena Ma Metrics Owonjezera kwa Ogulitsa / Obwereketsa | - Kusintha masiku a invoice kapena kuzindikira ndalama zomwe sizinasonkhanitsidwe (channel stuffing)- Kusintha manambala a ogwiritsa ntchito / ARR mu desiki kapena lipoti la pangano la banki - Kusunga mabuku awiri |
US: 18 U.S.C. § 1343 (Wire Fraud), 18 U.S.C. § 1350 / SOX § 802, Securities Act Rule 10b-5UK: Fraud Act 2006 (s.2 False Representation) & Theft Act 1968 (s.17 False Accounting) |
ZOCHITIKA: Owerengera ndalama, oyang'anira zachuma, ndi openda deta omwe amatulutsa malipoti abodza a osunga ndalama/obwereketsa amazengedwa mlandu limodzi ndi oyang'anira pazachiwembu zachinyengo. | US: Ofesi ya SEC ya Whistleblower (Form TCR), OSHA Sarbanes-Oxley (SOX § 806), Komiti Yowona za BungweUK: FCA Mluzi / Ofesi Yachinyengo Kwambiri ( SFO) |
| 2. Kubisala Kuphwanya Kwa Data, Kuchotsa Zipika Zolowera, kapena Kulipira Ransomware Kubisika ngati "Bug Bounty" | - Kuyitanitsa DevOps/SecOps kuti rm -rf zipika za seva zosokoneza- Kuuza makasitomala / owongolera kuti "palibe PII yomwe idafikiridwa" pomwe zida za database zidachitika - Kunamizira chithunzi cha SOC 2, PCI-DSS, kapena HIPAA |
US: 18 U.S.C. § 1519 (Obstruction/Destruction of Records), 18 U.S.C. § 4 (Misprision of Felony), FTC Act § 5, SEC Cybersecurity Disclosure Rule, HIPAAEU/UK: GDPR Art. 33 & 34 (72-Hour Breach Notice), NIS2 Directive |
ZOCHITA: Kuchotsa zipika pambuyo pa kuphwanya kapena chitetezo kukuchitika kulepheretsa chilungamo (spoliation). Ma CISO pawokha ndi mainjiniya adapezeka kuti ndi olakwa chifukwa chobisa milandu. |
US: FTC, SEC, HHS OCR (HIPAA), CISA, State Attorneys GeneralEU/UK: National Data Protection Authority ( ICO ku UK, CNIL, BfDI) pansi GDPR & EU Directive 2019/1937 |
| 3. Kutumiza "Zida Zogonjetsera," Kudutsa Zowongolera Zachitetezo, kapena Kukwapula/Kuba Data Yopikisana | - Code yolemba yomwe imazindikira kuyezetsa kowongolera / owerengera ndikusintha machitidwe - Kulambalala kutsimikizira kuti mufufuze nkhokwe ya omwe akupikisana nawo - Kuyimitsa zida zamankhwala, ndege, kapena zolumikizirana ndi chitetezo cha mafakitale |
US: 18 U.S.C. § 1030 (Computer Fraud and Abuse Act: CFAA), 18 U.S.C. § 1832 (Theft of Trade Secrets), OSHA Act, FDA / FAA / EPA malamuloUK: Computer Misuse Act 1990 |
WAMKULU: Kulemba script yomwe imadutsa zowongolera zaukadaulo kumaphwanya lamulo CFAA ndi Computer Misuse Act, kuwonetsa wopanga mapulogalamu aliyense payekhapayekha pamilandu yosokoneza makompyuta. |
US: DOJ Criminal Division, OSHA Whistleblower Program (whistleblowers.gov), FAA/FDA/EPA hotlinesUK/EU: Woyang'anira Zaumoyo ndi Chitetezo ( HSE) / National Competent Authority |
| 4. Chinyengo cha Mgwirizano wa Boma, Kukweza Maliliro a Zachipatala, kapena Makhadi a Nthawi ya Ndalama Yabodza | - Kulipira ndalama zothandizira boma / boma kapena mapangano achitetezo kwa maola osagwira ntchito - Kusintha mapulogalamu a EHR kapena manambala olipira azachipatala ( CPT/ICD-10) kuchulukitsa Medicare/Medicaid |
US: False Claims Act (31 U.S.C. § 3729: Civil & 18 U.S.C. § 287: Criminal), Anti-Kickback Statute (42 U.S.C. § 1320a-7b) |
ZAMBIRI KWAMBIRI: Kutumiza kapena kulembera zabodza ku bungwe la boma kumayambitsa katatu (3x) kuwonongeka kuphatikiza $13,946 to $27,894 pa zonena zabodza. |
US: False Claims Act Qui Tam Mlandu (31 U.S.C. § 3730(b)) yosungidwa pansi pa chisindikizo kudzera kwa loya wa Qui Tam (pays 15% to 30% of recovered government funds + § 3730(h) anti kubwezera) |
| 5. Malipiro Osaloleka, Kuzemba Misonkho, Kuchita Zopanda Chilolezo, kapena Zilango/Kuzembetsa Kutumiza Kutumiza kunja | - Kulipira antchito "pansi pa tebulo" kapena kunama W-2 / 1099 / I-9 zolemba- Kutumiza mapulogalamu / zida kapena kutsegulira maakaunti a mabungwe ovomerezeka ( OFAC / ITAR / EAR) |
US: 26 U.S.C. § 7201 / § 6672 (Trust Fund Recovery Penalty), IEEPA / OFAC Sanctions (50 U.S.C. § 1705)UK: Criminal Finances Act 2017 |
KUMWAMBA: Pansi IRC § 6672, wogwira ntchito zandalama aliyense yemwe ali ndi cheke kapena wowongolera omwe amalephera kupereka misonkho mwadala akhoza kuchitidwa 100% amene ali ndi udindo pamisonkho yosalipidwa ya kampani. |
US: Ofesi ya IRS Whistleblower (Form 211), FinCEN AML Whistleblower Program, Commerce BIS / OFAC kuwulula mwaufuluUK: HMRC Chinyengo Hotline |
Gawo 2: Ndondomeko Yokanitsa Pagawo Ndi Pang'onopang'ono & Ma tempulo a Imelo a Mawu ndi Mawu (The Paper-Trail Shield)¶
Pamene abwana kapena kasitomala akufunsani inu kuchita chinthu choletsedwa, cholinga chanu poyamba 24 hours kuwirikiza kawiri: (1) osachita zosemphana ndi malamulo, ndipo (2) kukakamiza zofunikila kukhala zolembedwa pomwe mumafotokoza "chikhulupiriro chomveka" kuti chochitacho chikuphwanya lamulo, lamulo, kapena lamulo.
N’cifukwa ciani sitepe yaciŵili imeneyi ndi yofunika kwambili? Pansi pa malamulo a federal ndi state whistleblower (such as Sarbanes-Oxley Section 806 and state wrongful-termination-in-violation-of-public-policy laws), simukuyenera ** kutsimikizira kukhoti kuti bwanayo adapalamula mlandu; muyenera kungotsimikizira kuti munalankhula zachikhulupiriro chabwino, zomveka bwino kuti zomwe mwapemphazo zikuphwanya lamulo kapena malamulo, ndikuti abwana anu akubwezerani pambuyo pake.
+-----------------------------------------------------------------------------+
| THE 3-STEP PAPER-TRAIL SHIELD AGAINST VERBAL ILLEGAL DIRECTIVES |
+-----------------------------------------------------------------------------+
| |
| [ STEP 1: THE LIVE VERBAL DEFLECTION (During Zoom / Phone Call) ] |
| Manager: "Don't put this in an email, just change the Q3 date / |
| wipe that access log before the auditor logs in at 3 PM." |
| You: "I want to make sure I don't break the schema or audit trail |
| by accident. Let me pull up the exact record and send you a |
| quick note to confirm the parameters before I run anything." |
| | |
| v (Within 15 Minutes of Hanging Up) |
| [ STEP 2: THE CONTEMPORANEOUS MEMORIALIZATION EMAIL (Polite Trap) ] |
| - Summarizes the verbal directive neutrally in writing |
| - Cites the specific compliance/legal rule it conflicts with |
| - Asks the manager (or Legal/Compliance) for explicit written sign-off |
| | |
| +--------------------------+--------------------------+ |
| v (90% of Cases: They Back Down) v (10%: Push) |
| Manager replies: "Hold off on that" Manager orders you again or |
| or calls angrily saying "Why did threatens firing -> Send |
| you email that?" -> DO NOT execute; STEP 3: Formal Protected |
| preserve the email offline. Compliance Refusal & Escalate |
+-----------------------------------------------------------------------------+
Template 1: Imelo ya "Innocent Clarification & Memorialization" (Send Within 15 Minutes of a Verbal Demand)¶
Gwiritsani ntchito template iyi yopanda kutsutsana nthawi yomweyo manejala kapena kasitomala akakufunsani kuti muchite zinthu zokayikitsa. Imatsekereza dongosolo lawo lamawu kukhala cholembedwa cholembedwa nthawi ndikuwapatsa njira yopulumutsira nkhope kuti abwerere pansi:
Mutu: Chitsimikizo cha pempho lotsatira lathu
[Time, e.g., 2:15 PM]itanani:[Project / Account / Audit Name]Hi
[Manager/Client Name],Kutsatira zomwe timalankhula pakali pano
[2:15 PM], Ndikufuna kuonetsetsa kuti ndamvetsetsa bwino malangizo anu ndisanasinthe[the Q3 revenue ledger / the production access logs / the customer breach notification / the SOC 2 evidence package].Pakuyitana kwathu, mudandipempha kuti nditero
[describe the exact action neutrally and specifically: e.g., change the contract execution date on Invoice #4082 from October 4 to September 28 so it books in Q3 / delete the authentication error logs from Server-Prod-04 prior to the external audit / omit the unauthorized database export from the client incident summary].Chifukwa
[modifying executed invoice dates / deleting production security logs during an active inquiry / omitting confirmed exfiltration of personal data]zikuwoneka kutsutsana[our GAAP revenue recognition controls and Sarbanes-Oxley / SEC audit requirements / GDPR Article 33 and FTC breach disclosure rules / our SOC 2 compliance policies], Sindingathe kuchita izi pansi pazidziwitso zanga popanda chitsimikiziro cholembedwa chochokera[Legal / Compliance / our external CPA]kutsimikizira kuti izi zikugwirizana ndi malamulo oyenera.Chonde yankhani kuti mutsimikizire ngati mukufunabe kuti ndiwonjezere pempholi
[Legal / Compliance / the Audit Committee]kwa chilolezo cholembedwa, kapena ndidziwitseni ngati tisiya[records / logs / report]zosasinthidwa.Zabwino zonse,
[Your Name & Title]
Template 2: The Formal "Protected Whistleblower Refusal" (If They Pressure You Again or Threaten Termination)¶
Ngati bwanayo ayankha mokwiya (or calls you back screaming "Don't email me, just do it or you're fired."), osagwedezeka ** osagwedezeka. Tumizani imelo yachiwiriyi nthawi yomweyo (copying Chief Legal Officer / Compliance / HR if appropriate after consulting counsel, and preserving an offline copy):
Mutu: Chidziwitso Chotsatira Mwachilamulo & Kukana Malangizo:
[Project / System Name]Hi
[Manager Name],Kutsatira foni yathu yachiwiri lero pa
[Time], m’mene munandilangiza ine kuti ndisalembe nkhaniyi, ndi kunena kuti[my role/contract would be terminated if I did not immediately modify the financial records / delete the breach logs / deploy the bypass code], ndikulemba kuti ndilembe udindo wanga.Ndili ndi chikhulupiliro chabwino, chikhulupiliro choyenera kuti ndikwaniritse malangizo anu
[state exact action]kungapangitse kuphwanya[cite specific law: e.g., federal wire/accounting fraud statutes (18 U.S.C. § 1343 / § 1519), SEC / FTC / GDPR data breach regulations, or OSHA safety standards].Chifukwa chake, ndiyenera kukana mwaulemu kutsatira malangizowo, ndipo sindidzasintha, kunamizira, kapena kufufuta zolemba zilizonse kapena zolemba. Ndimakhala wokonzeka komanso wokonzeka kugwira ntchito zanga zonse zovomerezeka. Chonde dziwani kuti mawu owululawa ndi otetezedwa pansi pa malamulo oletsa kubwezera.
moona mtima,
[Your Name & Title]
Gawo 3: Kusunga Umboni Popanda Kuimbidwa Mlandu Kapena Kumangidwa Chifukwa cha "Kuba Kwa Data" (18 U.S.C. § 1833(b) Safe Harbor)¶
Imodzi mwa njira zoopsa kwambiri zothanirana ndi katangale zomwe olemba anzawo ntchito amagwiritsa ntchito polimbana ndi oyimbira mbiri ndi "Chinsinsi cha Trade / CFAA Counter-Lawsuit": wogwira ntchito akapeza zachinyengo, kutsitsa. 10 GB za nkhokwe zamakampani, ma source code, ndi mindandanda yamakasitomala ku USB chala chanu kapena Google Drive yanu, ndikuchotsedwa ntchito, maloya akampaniyo amasumira wogwira ntchitoyo nthawi yomweyo (or refer them to the FBI) chifukwa chophwanya lamulo la Computer Fraud and Abuse Act (CFAA), Defend Trade Secrets Act (DTSA), ndi Pangano lawo Losawulura (NDA).
Tsatirani izi malamulo anayi okhwima kuti musunge umboni weniweni wa zomwe mukufuna popanda ** popanda ** kupereka abwana anu zifukwa zoti akusumireni chifukwa chakuba deta:
1. Zomwe MUYENERA Kusunga (The Refusal & Directive Trail)¶
Muyenera kusunga umboni wa ** malangizo osaloledwa ndi kukana kwanu , kuphatikiza mbiri yanu yantchito yoyera (so the company cannot claim they fired you two days later for "poor performance"):
1. Maimelo Anu Otsimikizira & Kukana Kwanthawi Yamakono (with full SMTP email headers showing Date, Message-ID, From, and To).
2. Zithunzi pazithunzi kapena Zithunzi Zamafoni za Slack/Teams DM, tikiti ya Jira, kapena imelo pomwe manejala adakufunsani kuti muwononge mbiriyo, kubisa zomwe zaphwanya, kapena kulambalala zowongolera. (Kujambula chithunzi cha sewero lanu loyang'anira ndi kamera yanu yam'manja ya foni yam'manja kumasiya ziro zero zotumiza mafayilo ku DLP yamakampani [Data Loss Prevention] mapulogalamu monga CrowdStrike, Teramind, kapena Zscaler).
3. Memo-to-Fayilo Yaumwini: Tsegulani chikalata pa kompyuta yanu kapena foni (yosalumikizidwa ndi netiweki yamakampani) ndipo lembani tsiku lenileni, nthawi, opezekapo, ndi mawu am'mawu akuyimbirana kulikonse kukangochitika, kenako tumizani imelo yochokera ku imelo yanu kupita kwa loya wanu wantchito (labeling the subject line: "PRIVILEGED & CONFIDENTIAL: SEEKING LEGAL ADVICE").
4. Ndemanga Zam'mbuyomu Zantchito, Makalata a Bonasi, ndi Mgwirizano wa Ntchito/1099: Tsitsani makope a ndemanga zanu za HR ndi maimelo otamanda tsopano IT isanatseke laputopu yanu.
2. Zomwe Simuyenera Kuchita (Avoiding Spoliation & Overbroad Data Dumping)¶
- MUSAMAtsitse mochulukira khodi ya eni, malo osungira makasitomala a PII, kapena zikwatu zonse za Google Drive ku ndodo yanu ya USB kapena akaunti yanu yamtambo.
- Momwe Federal Law Imatetezera Kuwululidwa Kwachindunji kwa Loya kapena Wowongolera (
The DTSA Whistleblower Immunity Shield: 18 U.S.C. § 1833(b)):- Pansi pa Defend Trade Secrets Act (
18 U.S.C. § 1833(b)(1)), Congress idakhazikitsa doko lotetezedwa ndi zigawenga komanso chitetezo cha anthu choposa ma NDA onse akampani: munthu sangayimbidwe mlandu kapena wolakwa malinga ndi lamulo lachinsinsi lazamalonda kapena boma poulula chinsinsi chamalonda kapena chikalata chachinsinsi chamakampani mwachikhulupiriro kwa Federal, State, kapena wamkulu wa boma (directly or indirectly), kapena kwa loya, ndi cholinga chongopereka lipoti kapena kufufuza zomwe akuganiziridwa kuti zaphwanya lamulo. - Momwemonso, pansi pa SEC Rule
21F-17(a), ndi kosaloledwa kwa bwana aliyense kukakamiza pangano lachinsinsi kapena kusiya NDA kuti akulepheretseni kulankhulana mwachindunji ndi SEC (or OSHA, CFTC, FinCEN, and EEOC) za zotetezedwa zomwe zingatheke kapena kuphwanya malamulo owongolera. - Njira Yabwino Kwambiri: M'malo mosunga mafayilo akampani pakompyuta yanu yapanyumba, sungani ** loya wonena za whistleblower kaye ** ndipo lolani loya wanu akuphunzitseni ndondomeko yeniyeni yosunga malamulo (
or ask corporate IT to place a formal "Litigation Hold" on the specific server logs in place).
- Pansi pa Defend Trade Secrets Act (
Gawo 4: Makontrakitala Odziyimira Pawokha (1099 / B2B Freelancers) motsutsana ndi Ogwira Ntchito a W-2: Kuthetsa Kasitomala Wachinyengo Motetezedwa¶
Ngati ndinu kontrakitala wodziyimira pawokha, wopanga pawokha, CFO wagawo, kapena mwiniwake wa bungwe (rather than a W-2 employee) ndipo kasitomala amafuna kuti muyike pulogalamu yachinyengo, kuwononga malo otetezedwa, kunamizira manambala amisonkho/ngongole, kapena kubisa zomwe zaphwanya:
- Makontrakitala Odziyimira Pawokha Akutsatiridwabe Ndi Malamulo Ofunika Kwambiri:
- Mu *** Lawson v. FMR LLC* (
571 U.S. 429 [2014])**, Khoti Lalikulu Kwambiri ku U.S. linanena kuti **Sarbanes-Oxley (SOX § 806) chitetezo cha whistleblower chimakhudza makontrakitala odziyimira pawokha, ma subcontractors, ndi alangizi akunja ** amakampani aboma. - False Claims Act (
31 U.S.C. § 3730(h)) imateteza mosapita m'mbali "wantchito aliyense, kontrakitala, kapena wothandizila" kuti asabwezere chifukwa chokana kuthandiza pa kontrakitala ya boma kapena chinyengo cholipira kuchipatala.
- Mu *** Lawson v. FMR LLC* (
- Pezani Chiphunzitso Chosaloledwa (
Restatement (Second) of Contracts § 178):- Kontrakitala kapena lamulo la kasitomala kuti achite zinthu zosaloledwa ndi **zopanda ntchito monga motsutsana ndi mfundo za anthu **. Wokasitomala sangakusumireni bwino chifukwa chakuphwanya mgwirizano chifukwa munakana kuchita chinyengo pa waya kapena kulowerera pakompyuta.
- Tumizani chikalata Chidziwitso Choyimitsidwa Ntchito Chifukwa Chosatsata Malamulo, invoice yantchito zonse zovomerezeka zomwe zamalizidwa mpaka pano, ndi kufufutani makiyi/zidziwitso zanu za API pamalo omwe amapangirako nthawi yomweyo kuti asachite zinthu zosaloledwa pansi pa chizindikiro cha wopanga mapulogalamu anu.
Warning
Mvetsetsani "Chenjezo la Upjohn" Musanalankhule ndi Company HR kapena In-House Legal. Ngati munganene za khalidwe losaloledwa la mkulu mkati mwa kampaniyo ndipo In-House General Counsel kapena Outside Law Firm akukufunsani mafunso, adzakupatsani Upjohn Chenjezo (Corporate Miranda): *"Ife tikuimira Kampani, OSATI inuyo panokha. Mwayi wa loya-kasitomala ndi wa Kampani yokhayo, yomwe ingasiye ndikupereka zonse zomwe mungatiuze ku Dipatimenti Yachilungamo kuti tipulumutse bungwe."
Tip
Sinthani Ntchito Pokhapokha Pambuyo Kufunsira Uphungu ("Kutulutsa Kowonjezera" vs. Zowonongeka Zobwezera). Musanatumize "I quit" imelo, funsani woyimira ntchito. Kusiya ntchito modzifunira nthawi yomweyo kumapangitsa kuti zikhale zovuta kunena kuti malipiro otayika (as the employer argues you quit voluntarily). Kutumiza Chiwonetsero 2 (Formal Written Refusal to Perform the Unlawful Act while remaining ready to perform lawful duties) amakakamiza abwana anu kukubwezani ntchito kapena kukuchotsani ntchito (creating a clear Whistleblower Retaliation claim).
(Pazokhudza zadzidzidzi zazamalamulo ndi chitetezo chakutali, onani Mwangozi adatumiza maimelo achinsinsi, kasitomala PII, kapena HIPAA spreadsheet, Kutsika kwa database yopanga mwangozi, git-push-push, kutayikira kwachinsinsi, ndi kuyeserera zochitika, Makasitomala kapena olemba anzawo ntchito mwadzidzidzi, kutsekedwa kwa Slack / imelo, ndikusunga mbiri yantchito,ndi Pulogalamu yowunikira olemba ntchito ("bossware") yoyikidwa pa kompyuta yanu ya BYOD.)
Malamulo achitetezo a madera ndi mabungwe ovomerezeka¶
| Dera / Dziko | Malamulo Oyimbidwa ndi Otsutsa Kubwezera | Lipoti Lovomerezeka la Boma & Bounty Portals | Masiku Omaliza Olemba Makalata (Statute of Limitations) |
|---|---|---|---|
| United States | Sarbanes-Oxley (18 U.S.C. § 1514A), Dodd-Frank (15 U.S.C. § 78u-6), False Claims Act (31 U.S.C. § 3730(h)), OSHA Whistleblower (29 statutes), DTSA (18 U.S.C. § 1833(b)), & Boma Lamulo Lochotsa Molakwika (e.g., CA Labor Code § 1102.5) |
- OSHA Whistleblower: whistleblowers.gov (1-800-321-6742)SEC ( 10%-30% Bounty): sec.gov/whistleblowerIRS ( 15%-30% Bounty): irs.gov/compliance/whistleblower-officeFinCEN ( AML/Sanctions): fincen.gov |
ZOYENERA: Kubwezera kwa chitetezo cha OSHA (Section 11c) ndi chete 30 DAYS. Sarbanes-Oxley (SOX) ndi 180 DAYS kuyambira tsiku lobwezera. Musazengereze kulumikizana ndi phungu. |
| United Kingdom | Lamulo Lofotokozera Chiwongoladzanja Pagulu la 1998 (PIDA: Employment Rights Act 1996 Part IVA, s.43A-43L) |
* Tetezani (UK Whistleblowing Charity Legal Advice Line):* 020 3117 2520 (protect-advice.org.uk)ACAS: 0300 123 1100** ICO ( Data Breaches):** 0303 123 1113- FCA / SFO / HMRC |
ZOCHITIKA 3 MONTHS LESS 1 DAY kuyambira tsiku lochotsedwa ntchito kapena kuwononga kuyambitsa ACAS Early Conciliation pakufuna kwa Employment Tribunal (unlimited damages for PIDA whistleblowing dismissal). |
** European Union (EEA)** |
Malangizo a EU Whistleblowing Directive (Directive (EU) 2019/1937) kusinthidwa kukhala malamulo adziko (e.g., German HinSchG, French Sapin II / Waserman Law) |
**Njira Zapadziko Lonse Zofotokozera Zakunja ** (e.g., German BfJ, French Défenseur des droits, Irish Protected Disclosures Commissioner) & Akuluakulu a Chitetezo cha Data (GDPR) |
Imatembenuza mtolo wa umboni kwa abwana: pansi pa Ndime 21(5), wogwira ntchito akanena kuti waphwanya malamulo ndi kuvulazidwa, lamulo likulingalira kuti chiwonongekocho chinali kubwezera kosaloledwa pokhapokha ngati bwanayo atatsimikizira mosiyana. |
| Canada | ** Khodi Yachigawenga (s. 425.1: Employer Retaliation is Criminal Offence)**, Canada Labor Code, & Mapulogalamu a Provincial Securities Whistleblower Programs (OSC ku Ontario) |
** Ontario Securities Commission (OSC Whistleblower:ku ku $5M mphoto)**- **Competition Bureau / CRA Leads Program ** - Unduna wa Zantchito m'chigawo |
Kubwezera kwa owalemba ntchito popereka zidziwitso kwa olimbikitsa malamulo kapena owongolera ndi mlandu waupandu (up to 5 years imprisonment) pansi pa Ndime 425.1 ya Canadian Criminal Code. |
| Australia & New Zealand | Australia: Corporations Act 2001 (Part 9.4AAA) & Taxation Administration Act 1953New Zealand: Kuwululidwa Kotetezedwa (Kuteteza Oyimbira) Act 2022 |
Australia:** ASIC (asic.gov.au), ATO, & Fair Work Commission (21-day dismissal deadline)New Zealand: Ofesi ya Ombudsman ( ombudsman.parliament.nz) |
Australia: Kuchotsedwa kwa General Protection ku Fair Work Commission kuyenera kuperekedwa mkati mwa 21 CALENDAR DAYS kuchotsedwa; Corporations Act zonena za khothi la whistleblower zimapereka chipukuta misozi komanso zilango zachiwembu kwa kampaniyo. |
Mafunso omwe amafunsidwa pafupipafupi¶
Kodi ndingayimbidwe mlandu kapena ine ndekha ndikangotsatira zomwe abwana anga andilamula kuti ndisinthe mbiri kapena kubisa zomwe zaphwanya?¶
Inde, mwamtheradi. Pansi pa malamulo a federal ku United States (`18 U.S.C. § 2 Aiding and Abetting` ndi `18 U.S.C. § 1519 Destruction or Alteration of Records`), malamulo aku United Kingdom (`Fraud Act 2006`), ndi malamulo ophwanya malamulo a ku Ulaya, "Ndinkangotsatira malamulo a woyang'anira wanga" sichiri chovomerezeka chovomerezeka ku mlandu kapena kuphwanya malamulo. Choyipa chachikulu, chifukwa malowedwe anu a digito, siginecha ya Git, kapena zidziwitso zamaakaunti zimalembedwa muzolemba zowerengera zamakina pomwe malangizo a manejala anu nthawi zambiri amaperekedwa pakamwa, owongolera ndi ozenga milandu nthawi zambiri amalipiritsa mainjiniya, wowerengera ndalama, kapena woyang'anira wotsatira yemwe adasintha kapena kuchotsa zipika.
Kodi ndingakane bwanji pempho losaloledwa ndi abwana anga popanda kuchotsedwa ntchito chifukwa cha "kusamvera"?¶
M'malo mokangana pakulankhula pa foni, nthawi yomweyo sinthani zokambiranazo kukhala imelo yaulemu, yolembedwa kuti "chikumbutso chamasiku ano" mkati mwa mphindi 15 za zokambirana. Fotokozerani mwachidule zomwe bwana wanu adakufunsani kuti muchite, nenani modekha kuti muli ndi chikhulupiriro chabwino kuti kutsatira malangizowo popanda chilolezo chalamulo kumasemphana ndi lamulo linalake, mulingo wowerengera ndalama, kapena zowongolera (`such as Sarbanes-Oxley, GDPR breach reporting rules, FTC regulations, or OSHA safety standards`), ndi kuwapempha kuti akupatseni chilolezo cholembedwa kuchokera ku dipatimenti ya Legal kapena Compliance ya kampaniyo pamene mukuwatsimikizira kuti ndinu okonzeka kugwira ntchito zanu zonse zovomerezeka. Kulemba chikhulupiliro chanu chomveka chakuphwanya malamulo musanachite chilichonse choyipa kutsekereza chitetezo choletsa kubwezera.
Kodi abwana anga angandisumire chifukwa chophwanya NDA yanga ngati ndisunga maimelo otsimikizira kuti andifunsa kuti ndiphwanye lamulo kapena kuwonetsa kwa loya?¶
Ayi, malinga ngati mutatsatira malamulo oyendetsera doko la whistleblower ndipo osatsitsa zambiri zamakampani kapena ma code code osagwirizana nawo. Pansi pa lamulo la U.S. Defend Trade Secrets Act (`18 U.S.C. § 1833(b)`), Malamulo a SEC Whistleblower (`Rule 21F-17`), UK Public Interest Disclosure Act (`PIDA Section 43J`), ndi EU Whistleblowing Directive (`Article 21`), mgwirizano uliwonse wosawulula (`NDA`) kapena mgwirizano wa ntchito ndi wopanda ntchito mwalamulo mpaka umayesa kukulepheretsani kugawana zinsinsi mwachinsinsi ndi loya wanu kapena woyang'anira boma ndi cholinga chopereka lipoti kapena kufufuza zomwe mukuganiziridwa kuti zaphwanya malamulo.
Kodi ndinene kaye zomwe abwana anga amafuna ku Human Resources (HR) kapena kwa Uphungu Wam'nyumba wakampaniyo?¶
Musanapite kwa HR kapena In-House Corporate Counsel pazachigawenga kapena zowongolera, muyenera kufunsa kaye ntchito yanu yodziyimira payokha yodziyimira pawokha kapena loya woimbidwa mlandu. Kumbukirani kuti Human Resources ndi General Counsel wa kampaniyo amayimira mwalamulo bungwe, osati inuyo (`as explained in the standard Upjohn warning`), ndipo udindo wawo waukulu walamulo ndikuchepetsa udindo wa bungwe. Woyimira mlandu wodziyimira pawokha amayimira 100 peresenti zokonda zanu pansi pa mwayi wokhazikika wa loya-kasitomala ndipo adzakulangizani ngati munganene nthawi imodzi ku Komiti yodziyimira payokha ya Audit ndi woyang'anira wakunja (`such as the SEC, OSHA, IRS, or Data Protection Authority`) kuti chitetezo chanu mwalamulo ndi kuyeneretsedwa kwa munthu woululira mbiri zisungidwe.
Maupangiri ogwirizana¶
- Mwangozi anatumiza imelo yachinsinsi ya malipiro, kasitomala PII, kapena HIPAA spreadsheet kwa wolandira molakwika
- Kutsika kwa database yopanga mwangozi, git-push-push, kutayikira kwachinsinsi, ndi kuyeserera zochitika
- Gawo lowonekera mwangozi lamasamba achinsinsi amalipiro, woyang'anira mawu achinsinsi, kapena mndandanda wantchito pa Zoom/Magulu
- Makasitomala kapena olemba anzawo ntchito mwadzidzidzi, kutsekedwa kwa Slack / imelo, ndikusunga mbiri yantchito
- Pulogalamu yowunikira olemba ntchito ("bossware") yoyikidwa pa kompyuta yanu ya BYOD
- Nambala zangozi
Magwero ndi malangizo ovomerezeka¶
- U.S. Dipatimenti ya Ntchito: Occupational Safety and Health Administration (
OSHA Whistleblower Protection Program: whistleblowers.gov): *Statutory Anti-Retaliation Protections Kudutsa 25+ Federal Laws Kuphatikizapo Sarbanes-Oxley (18 U.S.C. § 1514A), Taxpayer First Act, ndi Chitetezo Pantchito *. - U.S. Securities and Exchange Commission (
SEC Office of the Whistleblower: 15 U.S.C. § 78u-6 & Rule 21F-17): Kuyenerera Mphotho ya Whistleblower (10% to 30%), Chinsinsi, ndi Kuletsa kwa Olemba Ntchito Gag/NDA Clauses. - Kodi United States (
18 U.S.C. § 1519Anti-Spoliation/Kulepheretsa &18 U.S.C. § 1833(b)Tetezani Zinsinsi Zamalonda Kuteteza Chitetezo Chachinsinsi): Zilango Zaupandu Pakuwononga Zolemba Zofufuza / Kuphwanya ndi Kutetezedwa Mwalamulo Pakuwululidwa Kwachinsinsi kwa Loya kapena Wogwira Ntchito Boma. - ** European Union (
Directive (EU) 2019/1937 on the Protection of Persons Who Report Breaches of Union Law) & United Kingdom (Public Interest Disclosure Act 1998 / Employment Rights Act 1996 Part IVA):** Kubwezeredwa Mtolo Waumboni wa Zofuna Kubwezera ndi Kuchotsedwa kwa Magawo a Contractual Gag.