ICCP Code of Ethics

Certified computing professionals, consistent with their obligation to accommodate changes in the social environment and to keep up with
the public at large, should promote the understanding of information the development of the information processing profession.
processing methods and procedures using every resource at their 1.6: A Certification Council will not consider a complaint where the
command. holder’s conduct is already subject to legal proceedings. Any
Certified computing professionals have an obligation to their profes- complaint will only be considered when the legal action is completed,
sion to uphold the high ideals and level of personal knowledge as evi- or it is established that no legal proceedings will take place.
denced by the Certificate held. They should also encourage the 1.7: Recognizing that the language contained in all sections of either
dissemination of knowledge pertaining to the development of the the Code of Conduct or Code of Good Practice is subject to
computing profession. interpretations beyond those intended, the ICCP intends to confine all
Codes to the matters pertaining to personal actions of individual
Certified computing professionals have an obligation to serve the certified computing professionals in situations for which they can be
interests of their employers and clients loyally, diligently and honestly. held directly accountable without reasonable doubt.
1.8: Certified computing professionals have a responsibility to respect
Certified computing professionals must not engage in any conduct or intellectual property rights, including copyrights, patents and
commit any act which is a discredit to the reputation or integrity of the trademarks. Violation of copyrights, patents and terms of license
information processing profession. agreements is prohibited by law in most circumstances. Even when
not so protected, such violations are contrary to professional behavior.
Certified computing professionals must not imply that the Certificates, Software should be copied only with proper authorization.
which they hold, are their sole claim to professional competence. Unauthorized duplication of both printed and electronic materials must
be discouraged including those cases where the work has not been
Code of Conduct and Good Practice for certified explicitly protected by any means. Credit should not be taken for the
work of others. The work of others should not be used without specific
computing professionals acknowledgment and authorization.

The essential elements relating to conduct that identify a professional 2. Code of Conduct
activity are:
A high standard of skill and knowledge.
2.1: Disclosure: Subject to the confidential relationships between
A confidential relationship with people served.
oneself and one’s employer or client one is expected not to transmit
Public reliance upon the standards of conduct and established practice.
information which one acquires during the practice of one’s profession
The observance of an ethical code.
in any situation which may seriously affect a third party.
Therefore, these Codes have been formulated to strengthen the
2.2: Social Responsibility: One is expected to accept a responsibility
professional status of certified computing professionals.
to the public to diminish, through a continuing educational process,
confusion and misconceptions surrounding the information processing
1. Preamble industry. One is expected to be cognizant of and act in accordance
with all procedures and regulations to improve public safety through
1.1: The basic issue, which may arise in connection with any ethical the protection of information vital to the security of the nation and its
proceedings before a Certification Council, is whether a holder of a people, both collectively and individually.
Certificate administered by that Council has acted in a manner which 2.3: Conclusions and Opinions: One is expected to state a conclusion
violates the Code of Ethics for certified computing professionals. on a subject in one’s field only when it can be demonstrated that it has
1.2: Therefore, the ICCP has elaborated the existing Code of Conduct, been founded on adequate knowledge. One will state a qualified
which defines more specifically an individual’s professional opinion when expressing a view in an area within one’s professional
responsibility. This step was taken in recognition of questions and competence but not supported by relevant facts.
concerns as to what constitutes professional and ethical conduct in the 2.4: Identification: One shall properly qualify oneself when
computing profession. expressing an opinion outside one’s professional competence in the
1.3: The ICCP has reserved for and delegated to each Certification event that such an opinion could be identified by a third party as expert
Council the right to revoke any Certificate which has been issued testimony, or if by inference the opinion can be expected to be used
under its administration in the event that the recipient violates the improperly.
Codes of Ethics, as amplified by the Code of Conduct. The revocation 2.5: Integrity: One will not knowingly lay claims to competence one
proceedings are specified by rules governing the business of the does not demonstrably possess. One shall not take advantage of the
Certification Council and provide protection of the rights of any lack of knowledge or inexperience of others.
individual who may be subject to revocation of a certificate held. The 2.6: Conflict of Interest: One shall act with strict impartiality when
ICCP may bypass revocation proceedings and automatically revoke purporting to give independent advice. In the event that the advice
any Certificate for non-compliance with mandatory recertification given is currently or potentially influential to one’s personal benefit,
processes, providing the certificate was awarded subject to mandatory full and detailed disclosure to all relevant interested parties will be
recertification requirements. made at the time the advice is provided. One’s employer especially
1.4: Insofar as violation of the Code of Conduct may be difficult to should be made aware of any potential conflicts of interest. One will
adjudicate, the ICCP has also promulgated a Code of Good Practice, not denigrate the honesty or competence of a fellow professional or a
the violation of which does not in itself constitute a reason to revoke a competitor, with the intent to gain an unfair advantage.
Certificate. However, any evidence concerning a serious and consis- 2.7: Accountability: The degree of professional accountability for
tent breach of the Code of Good Practice may be considered as results will be dependent on the position held and type of work
additional circumstantial evidence in any ethical proceedings before a performed. For instance: A senior executive is accountable for the
Certification Council. quality of work performed by all individuals the person supervises and
1.5: Whereas the Code of Conduct is of a fundamental nature, the for ensuring that recipients of information are fully aware of known
Code of Good Practice is expected to be amended from time to time to limitations in the results provided. The personal accountability of
consultants and technical experts is especially important because of the
positions of unique trust inherent in their advisory roles. Consequent- 3.8: Violations: One is expected to report violations of the Code,
ly, they are accountable for seeing to it that known limitations of their testify in ethical proceedings where one has expert or firsthand
work are fully disclosed, documented and explained. Furthermore, knowledge, and serve on panels to judge complaints of violations of
information processing professionals have a responsibility to take ethical conduct.
appropriate action regarding any illegal or unethical practices that
come to their attention. Charges should be brought against a person
only when a reasonable basis for the allegations has been established, 4. Procedural requirements for revocation of certificate
without regard to personal interest. awarded
2.8: Protection of Privacy: One shall protect the privacy and
confidentiality of all entrusted information. One shall have special
4.1: The ICCP may automatically revoke Certificates for
regard for the potential effects of computer-based systems on the right
non-compliance with mandatory recertification processes, providing
of privacy of individuals whether this is within one’s own
the certificate was awarded subject to mandatory recertification
organization, among customers or suppliers, or in relation to the
requirements.
general public. Because of the privileged capability of computing
4.2: A Certification Council, on behalf of the Institute for
professionals to gain access to computerized files, especially strong
Certification of Computing Professionals, has the right to revoke any
strictures will be applied to those who have used their position of trust
Certificate which has been awarded by it in the event that the recipient
to obtain information from computerized files for their personal gain.
violates the Codes, or engages in conduct which is a discredit or
Where it is possible that decisions can be made within a computer-
disgrace to the computing profession.
based system could adversely affect the personal security, work or
4.3: The grounds for revocation, except for failure to comply with
career of an individual, the system design shall specifically provide for
mandatory recertification requirements, will be based upon the opinion
decision review by a responsible executive who will thus remain
of at least two-thirds of the members of the Council.
accountable and identifiable for that decision.
4.4: Procedure for handling revocation:
1. A formal written statement of charges alleging facts which
3. Code of Good Practice constitute the grounds for revocation will be prepared.
2. A copy of said charges will be forwarded to the person accused,
3.1: Education: One has a special responsibility to keep oneself fully fixing a time within which such person may file with the Council
aware of developments in information processing technology relevant answers to the charges.
to one’s current professional occupation. One will contribute to the 3. If the charges are denied in the answer, the Council will fix a time
interchange of technical and professional information by encouraging for the hearing and give notice of the time and place of the hearing to
and participating in educational activities directed to both fellow the person accused.
professionals and to the public at large. One will do all in one’s power 4. Presentation of evidence in support of the charges will be made by
to further public understanding of computer systems. One will the secretary (a nonvoting member) of the Certification Council.
contribute to the growth of knowledge in the field to the extent that 5. Presentation of the evidence in defense of the charges will be made
one’s expertise, and ability allow. by the accused or the designated representative of the accused.
3.2: Personal Conduct: Insofar as one’s personal and professional 6. Ample opportunity for both sides to present facts and arguments
activities interact visibly to the same public, one is expected to will be allowed at the hearing.
support, respect and abide by the appropriate laws and in general to 7. At the conclusion of the hearing, the Council will determine
apply the same high standards of behavior in one’s personal life as are whether or not the charges have been sufficiently established by the
demanded in one’s professional activities. evidence and whether the Certificate should be revoked or should not
3.3: Competence: One shall at all times exercise technical and be revoked.
professional competence at least to the level one claims. One shall not 8. The accused will be notified of the decision by registered mail.
deliberately withhold information in one’s possession unless 9. The accused has the right to request review of the decision by the
disclosure of that information could harm or seriously affect another Executive Committee of ICCP, provided an appeal in writing is
party, or unless one is bound by a proper, clearly defined confidential submitted to the President of ICCP within 30 days of the accused’s
relationship. One shall not deliberately destroy or diminish the value receipt of the Council’s decision.
or effectiveness of a computer- based system through acts of
commission or omission.
3.4: Statements: One shall not make false or exaggerated statements
as to the state of affairs existing or expected regarding any aspect of
information technology or the use of computers. In communicating
with lay persons, one shall use general language wherever possible and
shall not use technical terms or expressions unless there exist no
adequate equivalents in the general language.
3.5: Discretion: One shall exercise maximum discretion in disclosing,
or permitting to be disclosed, or using to one’s own advantage, any
information relating the affairs of one’s present or previous employers
or clients.
3.6: Conflict of interest: One shall not knowingly hold, assume, or Institute for Certification of Computing Professionals
accept a position or a client with which one’s interests conflict or are www.iccp.org
likely to conflict with one’s current duties or clients unless that interest 2400 E Devon Avenue, Suite 281, Des Plaines IL 60018
has been disclosed in advance to all parties involved. 847/299-4227
3.7: Public Safety: One has a responsibility to protect fundamental [email protected]
human rights and dignity and to respect cultural diversity. Those who
design, develop and maintain computer systems shall be alert to and
make others aware of any potential damage to the local and global
environment. When developing information systems, computing
professionals must ensure that their efforts are used to benefit
humanity. Harmful effects to general health and welfare of the public
shall be avoided.