ISC2 Launches Global Code of Professional Conduct for Cybersecurity

Alexandria, Va. – February 24, 2026 – ISC2, the world’s leading nonprofit member organization for cybersecurity professionals, today launched a new Code of Professional Conduct, establishing a global framework for ethical practices within the cybersecurity profession. This Code builds upon the existing ISC2 Code of Ethics, providing clear expectations for cybersecurity leaders and practitioners worldwide.

Addressing Evolving Ethical Challenges

The new Code is designed to guide cybersecurity professionals in navigating increasingly complex ethical challenges, particularly those arising from emerging technologies like artificial intelligence (AI) and the spread of disinformation. It aims to reinforce integrity and confidence in a rapidly evolving digital landscape.

Development and Collaboration

The Code was developed with input from nearly 1,400 cybersecurity professionals and was endorsed by the ISC2 Professional Conduct (Ethics) Committee and approved by the ISC2 Board of Directors. The development process involved gathering feedback from ISC2 members globally, as well as experts from academia and industry, ensuring the Code is relevant to professionals at all levels of experience, from Certified in Cybersecurity (CC) holders to those with CISSP credentials.

Key Principles of the Code

The Code is organized around two guiding principles: Ethics and Professional Conduct. The Ethics section covers integrity, confidentiality, respect for laws and regulations and public safety and societal impact. The Professional Conduct section outlines responsibility and accountability, collaboration and teamwork, competence and continuous improvement, and reporting issues and concerns.

A Living Document

ISC2 intends for the Code to be a “living document” that will be amended and refined as the cybersecurity profession continues to evolve. This ensures the Code remains relevant and effective in addressing emerging challenges.

Importance of Ethical Conduct

“Cybersecurity professionals have a profound responsibility not only to protect and secure individuals, organizations and systems around the world but also to uphold the integrity, accountability and trust that the profession depends on,” said ISC2 Chief Executive Officer Scott Beale. “The Code provides a shared foundation for guiding ethical decision-making and professional conduct, especially as emerging technologies like AI reshape how organizations operate and how security decisions are made.”

ISC2 and the Code of Ethics

The ISC2 Code of Ethics requires all certified members to commit to fully supporting the Code. Violations of the Code may result in revocation of certification, and members are obligated to report ethical misconduct by other ISC2 members. The four mandatory canons of the Code are to protect society, act honorably, provide diligent service, and advance the profession.

To explore the new ISC2 Cybersecurity Code of Professional Conduct, visit: http://www.isc2.org/about/Code-of-Professional-Conduct