Modules / KM-04
KT0401 - Code of conduct and moral compass
Intoduction to Cybersecurity Governance | KT04: Ethics at work
What is a code of conduct?
A code of conduct is a set of values, rules, standards, and principles outlining what employers expect from staff within an organization.
Often codes of conduct take big picture ideas tied to the business’s overall mission and core values and relate them to the behaviour and practices they desire from staff on a day-to-day basis.
Creating a code of conduct is a statement from leadership laying out their expectations and communicating the ethical principles they feel are most fundamental to success. Generally, it reflects the culture already present, or the culture leadership is looking to promote.
A code of conduct is closely related to a code of ethics, to the extent where the phrases are often interchangeable.
However, while there is tremendous overlap, there is also a slight nuance between the two
A code of ethics is broader, providing a set of principles that affect employee mindset and decision-making.
A code of conduct offers principles defining the ethics of a business, but it also contains specific rules for employee actions and behaviour.
Generally, both are combined into a single document, and an organization rarely has a different code for each.
A code of conduct in practice can range from big picture ideals to specific rules. For example, a code of conduct can outline how employees should behave to reflect the organization’s wider mission, but it can also define fixed regulations related to internal practices such as dress code or break policy.
A code of conduct could emphasize ethical attitudes and staff communication policies to prevent conflict or harassment while also outlining the consequences for poor behaving that violates the code.
Why create a code of conduct
You can think of adopting a code of conduct as the organization making a commitment to self-regulation. Leadership is putting into writing the conduct they expect from their employees and the ethical principles they want to guide them.
With a code of conduct in place, the organization has a framework to inform ethical decision-making for each and every stakeholder. While it isn’t a turn-key solution to every dilemma an employee faces, it shows staff the organization’s guiding principles and helps them make better choices in their daily activities.
By creating a code of conduct:
The staff understands what rules and expectations management has. It defines how to act while at work, how to communicate both internally and externally, and helps employees be successful at the company.
The organization has concrete company policies to help compliance.
Potential customers and business partners understand the values of the organization.
So far, we have focused on the internal effects of a code of conduct. But creating a code of conduct also has benefits in attracting new customers. Showing the values that the organization believes in, and backing it up with actions, can help engender a positive and receptive attitude from potential customers.
What to include in a code of conduct
While all businesses are different, and no two codes of conduct are the same, recurring factors and themes are found among successful ones.
Your organization’s specific purpose for adopting a code of conduct will define the scope to aim for. Some choose to focus on only the most essential values and guidelines to not overburden employees with information they may forget. Some seek to be more comprehensive and produce documentation covering as many aspects as possible.
Your code of conduct should include information in some form regarding:
The values your organization believes in
Guidelines for behaviour
Day-to-day business practices
How employees should interact with outside parties
It is also essential to define the procedures and consequences of code violations where applicable. It may be more challenging to identify a code of conduct violation when it comes to company values. However, employees should know the disciplinary processes for fixed rules (harassment, tardiness, etc.).
Finally, codes of conduct are typically prefaced with a letter from the CEO that provides a personal touch and emphasizes the leadership team’s commitment to the principles and rules it contains.
Listed below are important factors to consider for inclusion in your code of conduct. These are grouped into the four main areas described above. While covering every element detailed here may seem unrealistic, especially for new or small businesses, it is better to have something in place than react and define policies after an issue arises.
1. Company values
Details and topics related to the values the company holds itself to. This section allows the company to show the ethics and beliefs most dear to them and how they put this into action. This could include but is not limited to:
Business ethics
Social responsibility
Environmental responsibility
Employee rights
Commitment and responsibility
Diversity and inclusion
2. Employee behaviour
Within a code of conduct, leadership must explain to all employees what is expected of them in terms of behaviour and performance. This could be related to how they treat the people around them and communicate or specifics related to how they perform their role. A company could cover numerous employee behaviour topics within a code of conduct. Examples include:
Standards of professionalism
Discrimination and sexual harassment policies
Use of company assets
Use of social media
Communication rules
Disciplinary process
3. Internal practices
In this instance, internal practices refer to defined rules related to day-to-day business practices that are easy to explain. While similar to employee behavior, it is hard to define a simple black and white definition for “Standards of professionalism.” That topic requires more explanation to convey the expectation to an employee. Whereas a company’s rules related to attendance and punctuality is a set thing that is simple to understand. Examples of the internal practices a code of conduct could contain include:
Dress code
Annual leave/holiday time
Inclement weather policy
Break policy
Onboarding process
Job duties
Training guidelines
Rules related to time off through illness/injury
Attendance and punctuality
Use of phone while at work
Benefits
Chain of command
Legal compliance
4. External practices
Finally, a code of conduct; should define the expectations for employees when dealing with external parties. For example, this could be in relation to confidential company material or a level of courtesy and respect when dealing with customers. There are many examples of external practices a code of conduct may define, such as:
Confidentiality
Privacy
Intellectual property policies
Customer communication requirements
Conflict of interests