I am working as an apprentice in a very small company, and, although sizable amount of money and IP (Intellectual Property) pass by our company, IT Security and presence of legally obliged documents are nearly nonexistent and the boss is seemingly unwilling to do anything about it.
Some issues :
- All the passwords for the company are in a excel sheet and routinely sent over email that isn't protected well
As an apprentice, I don't really see myself as legitimate (I do a little bit of IT on my apprenticeship, but not in the company infra, and I know nothing legal-wise) to bringing those issues to my boss (which is the CEO of the company), and seeing the whole picture that has been going for years now, that tells me that something like that will never be resolved even if brought up.
But I'd like to have that discussion with them, how can I approach that in a way that would not discredit me?