When I was working, there was an agreement in place that - if an AR got personally sued for what he'd done as an AR - the company would pay for their defense and any settlements. But there was a disclaimer that it didn't include 'willful misconduct' - if it was considered willful misconduct (e.g. lying) then you were on your own.
I don't recall anything regarding criminal charges - I suspect it would be treated similarly - but I doubt many of us even thought about that possibility.