The Establishment and Enforcement of Codes

Abstract

Information and communications technology (ICT) is now used more by non-IT professional end-users than by IT professionals. A survey of 125 London-based organisations found that the majority had instituted codes of conduct designed to govern the use of ICT by their employees. However, the primary purpose of adopting such codes was to ensure the security and efficient operation of the organisation's information systems rather than for wider ethical considerations. Hence, few of the codes of conduct addressed issues relating to the collection, storage and dissemination of data about individuals (personal data); this was especially the case with codes emanating from IT departments rather than senior management. In general, codes of conduct were found to be ineffective in influencing end-user behaviour in the organisations surveyed. Codes of conduct are a means by which organisations seek to exercise power, control and ownership, but their effectiveness is compromised by the nature of ICT itself as well as the attitudes of employees. The failure of well-publicised ethical policies to influence use of ICT by business studies students – the managers of tomorrow – suggests that these tensions are likely to remain unresolved.