I've initiated "process improvements" a few times. It's always unpleasant since you're rocking the boat (kinda like when you report a security issue to a company with no established process.)

- got Royal Bank Canada while I was there to star out account numbers on ATM receipts. Had to find a competitor's receipt first (CIBC) and show a senior manager to "prove" there was an issue.

- shortly after leaving Netscape found email parsing bug and submitted that to a an ex-coworker who channeled it to the right developer.

Stay tuned for some more in process.