**CROs tend to adopt both formal and informal mechanisms for their knowledge protection.**

### **Case illustration:**

All four case firms take three major knowledge protection actions: signing confidentiality agreements with clients and employees, establishing the codes of conduct in the SOP for knowledge protection, and setting the information access limit to authority. The first action belongs to formal and legal mechanisms, while the second and third actions belong to informal mechanisms.
