If your company discovers that it may have committed criminal misconduct, you may be able to avoid prosecution entirely – but only if you act ...