“How can any company know if its processes, products, people are safe? Only if everyone is watching and telling the truth. The first part can be assumed; the second cannot.”