Summary

ISSO professionals must be extremely honest people of high integrity. After all, they know the vulnerabilities of the corporate information and information systems assets as well as the protection mechanisms. That is very valuable information. ISSOs must conduct themselves in an ethical manner at all times. If they belong to a professional, security-related association, they must also adhere to the association's code of conduct.

ISSO professionals must also do their best to encourage all corporate employees, led by executive management, to act in an ethical manner when doing their work at the corporation. The CIAPP will benefit through fewer information thefts, damage, unauthorized modification, and CIAPP violations and will provide for a corporate information assets protection environment that is better overall.