Comment To the OP (Score 1, Informative) 244
I'm sorry to hear this is what is going on. Surprising? I think not.
I have, at times, been put in a similar situation - Managment wants to, or believes they can mitigate the risk if they just don't look at it or just pretend it doesn't exist.
What it mainly comes down to is that Upper Mgmt wants to protect their bottom line - return on investment to shareholders. If this comes at a cost of skirting some laws, or bending the rules a little to appease them, then so be it. *cough*Enron
The best advice I could give you is to document, document, DOCUMENT. Document everything. Save it everywhere. Save it on your work hard drive, save it to the server, email it to another trusted individual, print it out and save it in your work filecabinet, etc. If your company wants to erase info, if you have enough copies in the workplace, there will not be any way they will get them all. You get the picture. Because, if something DOES happen (and chances are, it will...we all know it is just a matter of time) then it is documented and you can hopefully save your rear end and not end up in the slammer with Bubba. I would not do anything rash, like post it to wikileaks or something similar, because there is a good chance it could still be tracked down to you, and then you are in a world of hurt.
If you are an Infragard member, perhaps talk to your SA about it. Your conversations with them are confidential and you might be able to get some more advice about the matter. Also, that is another way for you to CYA. Again, protect your rear end. Yes, I know this can go against the grain of what Slashdotters want to do/say/hear/OMG GOV'T IS BAD/etc, but they are a good resource and can offer you advice. Perhaps there is already an ongoing investigation, and your information would be helpful.
I wouldn't do anything that would jeoparidize your job - they are hard to come by, and we all know that the economic outlook isn't the greatest, no matter what part of the world you live in. Just document, document, document. Make sure your boss is aware of your concerns. If that is ignored, then all you can do is document, document, document.
I wish you the best of luck - I do not envy being put in that position, as if the breach is severe enough, it really is a no-win situation for everyone involved.
I have, at times, been put in a similar situation - Managment wants to, or believes they can mitigate the risk if they just don't look at it or just pretend it doesn't exist.
What it mainly comes down to is that Upper Mgmt wants to protect their bottom line - return on investment to shareholders. If this comes at a cost of skirting some laws, or bending the rules a little to appease them, then so be it. *cough*Enron
The best advice I could give you is to document, document, DOCUMENT. Document everything. Save it everywhere. Save it on your work hard drive, save it to the server, email it to another trusted individual, print it out and save it in your work filecabinet, etc. If your company wants to erase info, if you have enough copies in the workplace, there will not be any way they will get them all. You get the picture. Because, if something DOES happen (and chances are, it will...we all know it is just a matter of time) then it is documented and you can hopefully save your rear end and not end up in the slammer with Bubba. I would not do anything rash, like post it to wikileaks or something similar, because there is a good chance it could still be tracked down to you, and then you are in a world of hurt.
If you are an Infragard member, perhaps talk to your SA about it. Your conversations with them are confidential and you might be able to get some more advice about the matter. Also, that is another way for you to CYA. Again, protect your rear end. Yes, I know this can go against the grain of what Slashdotters want to do/say/hear/OMG GOV'T IS BAD/etc, but they are a good resource and can offer you advice. Perhaps there is already an ongoing investigation, and your information would be helpful.
I wouldn't do anything that would jeoparidize your job - they are hard to come by, and we all know that the economic outlook isn't the greatest, no matter what part of the world you live in. Just document, document, document. Make sure your boss is aware of your concerns. If that is ignored, then all you can do is document, document, document.
I wish you the best of luck - I do not envy being put in that position, as if the breach is severe enough, it really is a no-win situation for everyone involved.
