4.2 Codes of Conduct

4.2.1 Sources of codes of conduct

Codes of Conduct
Codes of conduct provide guidance on expected professional behaviour and are produced by:
  • Organisations – internal policies and procedures
  • Professional bodies:
    • British Computer Society (BCS)
    • The Institution of Analysts and Programmers (IAP)
    • Chartered Institute of Information Security (CIISec)
  • Governmental bodies – sector and public service guidance

4.2.2 Influence of codes of conduct on professional behaviour

Professional Behaviour
Guidelines in codes of conduct influence behaviour by:
  • Ensuring compliance with policies, procedures, and legislation
  • Ensuring quality of work
  • Minimising risk to the public
  • Encouraging competence and integrity
  • Supporting meeting deadlines
  • Encouraging effective communication
  • Maintaining confidentiality and trust

4.2.3 Sources of digital industry standards

Industry Standards
Digital industry standards are produced by organisations such as:
  • International Organization for Standardization (ISO)
  • Web Content Accessibility Guidelines (WCAG)
  • World Wide Web Consortium (W3C®)
  • Internet Engineering Task Force (IETF)
  • Electronic Industries Alliance / Telecommunications Industry Association (EIA/TIA)
  • British Standards (BS)
  • Institute of Electrical and Electronics Engineers (IEEE)
  • Payment Card Industry Security Standards Council (PCI SSC)

4.2.4 Acceptable Use Policies (AUP)

Purpose and Content of AUPs
Acceptable Use Policies define how digital systems may be used.

Typical AUP content includes:
  • Permitted activities
  • Prohibited activities
  • Working practices, including confidentiality
  • Communication etiquette and organisational image
  • Sanctions and penalties for misuse

4.2.5 Whistleblowing procedures

Importance of Whistleblowing
Whistleblowing procedures allow individuals to report wrongdoing safely and legally.

They help organisations identify risks early and protect staff who raise genuine concerns.

4.2.6 Interrelationship between digital guidelines and practice

Impact and Professional Judgement
Guidelines and standards shape how digital support and security professionals work.

Making sound judgements ensures:
  • Organisations operate legally and ethically
  • Individuals are treated fairly and securely
  • Societal trust in digital systems is maintained