A city HR director wants security staff to sign only the municipal employee handbook and skip any security-specific ethics acknowledgment. Why should leadership still require an organizational security code of ethics?
Select an answer to reveal the explanation.
Short Explanation
A city handbook is the employee rulebook for payroll and leave — useful, but it does not spell out how a security pro should handle conflicted findings or sensitive data. A security ethics code is the extra playbook for those gray-area moments. Skipping it leaves staff guessing when loyalty and duty collide.
Full Explanation
Organizational codes of ethics translate professional expectations into local norms: conflict of interest, truthful reporting, protection of confidential data, and refusal of unauthorized tools or shortcuts. A generic municipal handbook covers employment conduct but rarely addresses security-specific dilemmas at CISSP depth. Requiring acknowledgment creates a clear, enforceable baseline that complements — rather than duplicates — employment policy and professional certification canons.