full-disclosure - Re: SOX whistleblowers' clause Compliance

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu Dec  1 06:58:24 2005
From: infosecbofh at gmail.com (InfoSecBOFH)
Subject: Re: SOX whistleblowers' clause Compliance

> Why cant you use google to find out this ?

The same reason you can't use Google and find your answer fuckbag.

> *In the para 4*
> "Protecting whistleblowers is an essential component of an ethical
> and open work environment."

No mention of an anon email address here.


> *In para 6* <----- this is the one that you want
> "Provide Employees Multiple Avenues to Report Concerns"
>  While employees will hopefully feel comfortable raising concerns
>  directly with their supervisors, many employees are reluctant to
>  raise concerns with line management for fear of retaliation,
>  especially where their concerns pertain to unethical or illegal
>  conduct by their line managers. Therefore, nonprofits should provide
>  several options for employees to raise concerns, including the
>  option of raising a concern anonymously.

Again, not specifying email.  A simple drop box in the lunchroom
facilitates this.