. . "Instead, the Court held, SOX protects employees only if they disclose certain types of information to the three groups identified in the statute: (1) federal regulatory and law enforcement agencies, (2) Congress and (3) employee supervisors." . .