It's good to be needed

It's finally becoming brutally apparent that we can't hide behind the nebulous ethics of "business decisions." Just as security isn't just the job of one poor ostracized soul in the IT department, the ethical decisions of a company don't only reside in the corner office. All that's being legislated is the lowest possible baseline of ethical behavior. If we are going to accept payment from a company for our brainpower, and we're not reporting and acting upon what we see, then we've failed our end of the bargain. Using the justification of "it's a gray area" is completely unacceptable -- what companies need to avoid is the mere appearance of impropriety. It's important for tone at the top, if nothing else. Employees need to see zero tolerance from above, to ensure the company isn't directly implicated when an employee commits fraud on his own.