1. Perform all professional activities and duties in accordance with the local laws and the ethical principles;
2. Promote good information security concepts and practices;
3. Maintain the confidentiality of all proprietary or otherwise sensitive information encountered in the course of professional activities;
4. Discharge professional responsibilities with due diligence and honesty;
5. Not intentionally hurt the professional reputation or practice of colleagues, clients, or employers;
6. Support the establishment of and compliance with appropriate standards, procedures, and controls for information system.