To act responsibly, IAASSE strives to achieve the highest standards of integrity and expresses the conscience of the profession around the world in a responsible and ethical way. It is important that all members ensure IAASSE's compliance by adhering to the same standards and expectations.
- Governed by rough consensus & running code
- Abide by a code of ethics (see below)
- Not-for-profit
- Not driven by commercial interests
- Risk-based approach
The IAASSE code of ethics and conduct describes association's commitment to the responsible behavior, highest standards of integrity, and ethical conduct. It is designed to guide the ethical conduct of all academicians, students, scholars and professionals and anyone who uses science and technology in an impactful way. Breaches of the Code of Ethics may result in the association taking disciplinary action
The members of the IAASSE, in accepting a personal obligation to profession commit to the highest ethical and professional conduct, agree:
- To hold paramount the safety, health, and welfare of the public, to strive to comply with ethical design and sustainable development practices, and to disclose promptly factors that might endanger the public or the environment
- To avoid real or perceived conflicts of interest whenever possible, and to disclose them to affected parties when they do exist
- To be honest and realistic in stating claims or estimates based on available data
- To reject bribery in all its forms
- To improve the understanding by individuals and society of the capabilities and societal implications of conventional and emerging technologies, including intelligent systems
- To maintain and improve our technical competence and to undertake technological tasks for others only if qualified by training or experience, or after full disclosure of pertinent limitations
- To seek, accept, and offer honest criticism of technical work, to acknowledge and correct errors, and to credit properly the contributions of others
- To treat fairly all persons and to not engage in acts of discrimination based on race, religion, gender, disability, age, national origin, sexual orientation, gender identity, or gender expression
- To avoid injuring others, their property, reputation, or employment by false or malicious action
- To assist colleagues and co-workers in their professional development and to support them in following this code of ethics.
- Perform all professional activities and duties in accordance with all applicable laws and the highest ethical principles
- Promote the implementation of and promote compliance with standards, procedures, controls for application security
- Maintain appropriate confidentiality of proprietary or otherwise sensitive information encountered in the course of professional activities
- Discharge professional responsibilities with diligence and honesty
- To communicate openly and honestly
- Refrain from any activities which might constitute a conflict of interest or otherwise damage the reputation of employers, the information security profession, or the Association
- To maintain and affirm our objectivity and independence
- To reject inappropriate pressure from industry or others
- Not intentionally injure or impugn the professional reputation of practice of colleagues, clients, or employers
- Treat everyone with respect and dignity, and
- To avoid relationships that impair or may appear to impair OWASP's objectivity and independence.