Ethics in a privileged position.
WHAT THE POSITION INVOLVES
Access to systems, files and communications belonging to others.
WHAT THAT REQUIRES
Accessing only what the task requires Never viewing material out of curiosity Never discussing what you encounter Treating everything seen as confidential
WHY IT MATTERS SO MUCH
Trust in IT is what allows the function to work, and it is lost instantly.
WHAT TO DO IF YOU ENCOUNTER SOMETHING CONCERNING
Follow the organisation's process, rather than acting alone.
WHAT NOT TO DO
Investigate beyond your authority Share it informally Ignore something serious
WHAT TO BE CAREFUL WITH
Remote sessions, where personal material may be visible Backups and exports containing personal data Credentials belonging to others
WHAT TO NEVER DO
Ask a user for their password Use administrative access for personal purposes Retain access after leaving a role
WHAT TO DECLARE
Any conflict of interest in purchasing or supplier decisions.
WHAT TO REPORT
Your own mistakes, promptly.
WHY
Concealment converts an error into misconduct.
