ISC2 survey highlights strong practitioner support for professional conduct standards and the role they play in strengthening ethics, accountability and trust across the cybersecurity profession.
In a complex cybersecurity environment, professionals are frequently asked to balance technical, business, legal and ethical considerations. To better understand how cybersecurity practitioners view professional conduct standards in general, along with how they perceive the role of ISC2’s Code of Professional Conduct specifically, ISC2 surveyed nearly 1,000 global cybersecurity professionals. Their responses revealed broad support for professional conduct standards and positive perceptions around the role they play in strengthening the profession.
Broad Support for Professional Conduct Standards
Respondents placed a high value on professional conduct standards; 85% of respondents agreed that a code of professional conduct is necessary for the cybersecurity profession, including 71% who strongly agreed. More than three quarters of respondents (78%) agreed that the profession would benefit from clearer shared standards of professional conduct.
The Code Is Viewed as Beneficial to the Profession
Respondents familiar with ISC2’s Code of Professional Conduct credit it with tangible benefits for the profession. Nearly nine in 10 (86%) agreed the Code fosters a stronger culture of ethics and accountability, while almost as many (85%) said it helps strengthen public trust in the profession. At a time when rapid and widespread adoption of AI has catapulted ethical standards into the mainstream, the clear signal from respondents is that a consistent, globally recognized and applicable code of conduct is of paramount importance in a cybersecurity landscape where AI adoption is rampant.
Just over 8 in 10 (83%) also agreed that the Code plays an important role in elevating cybersecurity as a recognized and respected discipline. These perceptions highlight that respondents see the Code as a resource that contributes to the long-term credibility and professional standing of cybersecurity.
Putting Professional Conduct into Practice
For many respondents, support for a shared set of standards translates into practical use. Nearly three-quarters (74%) of those familiar with the Code reported referring to it at least occasionally for guidance on situations around balancing security objectives with organizational goals, data privacy and confidentiality, and conflicts of interest or disclosure obligations. Among those who said they have used it, almost two-thirds (62%) said it has been very helpful when navigating ethical or professional conduct challenges.
Professionals Want More Resources
Interest in additional resources reflects a desire to build on the value that respondents already see in the Code. Most respondents (80%) said real-world scenarios or case studies would help them apply the Code in practice, while many also expressed interest in quick-reference guides (58%) and training modules (54%).
Respondents were also interested in guidance related to data privacy and confidentiality, conflicts of interest and disclosure obligations, governance of AI and emerging technologies, as well as balancing security objectives with organizational goals.
The survey findings reinforce that ISC2 is moving in the right direction: professionals are asking for practical examples, concise guidance and training that help them apply the Code in real-world situations. Over the past several months, ISC2 has released Practice Guides and a Ethical Decision-Making Guide to support cybersecurity professionals in their application of the Code into day-to-day work scenarios. In August, a Express Course on applying the Code was released and is free for ISC2 Members and Associates to enroll in. The course is worth 2 CPE credits and is available on-demand.
Looking Ahead
As cybersecurity professionals face increasingly complex decisions involving technology, risk, business priorities and emerging technologies, the importance of professional conduct standards has never been clearer. These survey findings demonstrate that practitioners not only value shared ethical and professional standards, they also see tangible benefits from applying them in their day-to-day work. The findings reinforce the role of ISC2’s Code of Professional Conduct in supporting accountability, strengthening public trust and helping professionals navigate challenging situations with confidence.
Building on the resources and support released in 2026, ISC2 will use these findings to help shape 2027 program planning and guide continued development of practical resources, training and engagement opportunities that make the Code easier to apply in real-world situations.
Resources are already available to help professionals and teams get started. To apply these principles consistently, explore ISC2’s Code of Professional Conduct and its supporting resources. Start by reviewing the Code, discussing how its principles apply to your organization's work and incorporating its guidance into security policies, decision-making processes and professional development programs.
Learn more about the Code of Professional Conduct and how it can support your cybersecurity best practices.
