The responsibility to protect corporate information does not generally include any resistance to duress, almost every company has to simply accept that the heal

The responsibility to protect corporate information does not generally include any resistance to duress, almost every company has to simply accept that the health or life or imprisonment of the responsible employee is more valuable (really, on a whole different scale) than the protection of that information, and they have to instruct their employees to comply with any duress - just as bank tellers are instructed to just hand over cash when threatened, or as happened when duress was applied to employee family members in the https://en.wikipedia.org/wiki/2009_Bank_of_Ireland_robbery https://en.wikipedia.org/wiki/2009_Bank_of_Ireland_robbery - if you're not working in the military or intelligence services where literally lives are at stake, it's exceedingly likely that your threat model should simply not include trying to resist duress, and if you do, you're immorally putting your employees at risk to protect something that's relatively not that important like corporate profits.