Your biggest risk from whistleblowers is the primes in your organization.
They’re collecting information that they will use to file a qui tam action in case they get terminated or as a nest egg when they decide to quit.
These suits are usually settled without admission of wrongdoing but they can be pricey.
Your primes are being targeted by False Claim Act attorneys over social media for qui tam actions.
“We’ll never ask you to submit a diagnostic code that’s not 100% supported by the documentation, but if you’re uncomfortable with any diagnostic code we ask you to submit, for whatever reason, tell us and we won’t submit it.”
“No questions asked.”
Put it in writing. Have them sign it.
It will seriously undermine any claim they make.
In complex systems, there are rarely silver bullets.
This is one.