Ethical Conduct

Members are expected to exhibit high standards of ethical conduct in their professional relationships and to act at all times in accordance with AiSP’s values of:
  • Honesty;

  • Fairness;

  • Integrity;

  • Diligence

Professional Standards and Responsibilities

All members are expected to exhibit high standards of professionalism; act consistently to enhance the reputation of AiSP and the information security profession; act within the law, and in the best interest of their employers; and take appropriate actions to avoid or resolve potential conflicts of interests.

In addition, AVIP, Ordinary and Associate Members shall:

Professional Standards

  • Maintain currency and competency on all matters relevant to the discharge of their duties;

  • Maintain relevant AiSP recognised certifications;

  • Act only within their level of competence;

  • Deliver services in accordance with the relevant professional standards;

  • Support the professional development of other members of the profession

Professional Responsibilities

  • Take reasonable action/s to prevent unlawful activities;

  • Take reasonable action/s to prevent harm to their employers, personnel, property, the general public interest, and where relevant the national interest of the jurisdiction in which they perform their duties;

  • Report to the appropriate authorities any action/s or event/s considered to be a violation of relevant law/s, legal, or regulatory requirement/s;

  • Disclose to their employers all matters that may significantly affect or impact the organisation’s information security;

  • Respect the confidentiality of information acquired during the course of their duties and not disclose information without specific authority;

  • Adhere to standards of professional care.

Conflict of Interest

Members should recognise the potential for conflict of interests and take appropriate actions to avoid or resolve such conflicts including conflicts between responsibility to an employer and the requirements of law or of this code should be identified to the employer in writing and a copy retained by the Member.