The SEC has instituted cease-and-desist proceedings against KBR, Inc. for violating Rule 21f-17 of the Securities Exchange Act by using a confidentiality statement that impeded employees from reporting potential securities law violations. KBR has accepted a settlement including a $130,000 civil penalty and has amended its confidentiality statement to comply with whistleblower protections. The SEC required KBR to undertake reasonable efforts to inform employees of their rights to communicate with government agencies regarding violations without needing prior authorization.