Code of Business Conduct Template (Corporate Ethics Code)

Code of Business Conduct: [Organization name]

A code of business conduct sets out the ethical standards that every director, employee and representative of an organisation must follow, how to make decisions when the rules are unclear, and how to raise a concern without fear of retaliation. Its structure is aligned with ISO 37301:2021 (compliance management systems, with Amd 1:2024), clause 5.2 on the compliance policy, and links to the anti-bribery policy required by ISO 37001:2025 clause 5.2. It also covers the elements of a code of ethics listed in US SEC Regulation S-K Item 406. It is a corporate ethics code: for an open-source or event community code of conduct, use dev/code-of-conduct. Replace every [bracketed] value and every row marked Example. This is a documentation format, not legal advice: check the current official text and ask a qualified professional.

Contents

1. A message from leadership
2. Who this code applies to and how to use it
3. Speaking up
4. Respect for people
5. Integrity in business
6. Information and assets
7. Communities and the wider world
8. Breaches, waivers and discipline
9. Governance, training and attestation
10. Legal context examples
11. References

Document control

Approvals

Revision history

1. A message from leadership

[Two or three paragraphs signed by the chief executive or chair.]

Example: "Our customers trust our bridges, pumps and turbines with their safety. That trust depends on every test report being honest and every contract being won fairly. If something feels wrong, tell us. You will never be penalised for raising a concern in good faith."

2. Who this code applies to and how to use it

This code applies to [all directors, officers, employees, temporary staff and contractors of the group]. We expect [agents, distributors, joint venture partners and suppliers] to follow equivalent standards, set in the supplier code and contracts.

When a situation is not covered, ask:

3. Speaking up

We do not tolerate retaliation against anyone who raises a concern in good faith or helps an investigation. Retaliation is itself a breach of this code. Details: compliance/whistleblowing-policy.

4. Respect for people

5. Integrity in business

5.1 Bribery and corruption

We do not offer, give, request or accept bribes, including facilitation payments, directly or through anyone acting for us. Full rules, due diligence and red flags: compliance/iso-37001-anti-bribery.

5.2 Gifts and hospitality

5.3 Conflicts of interest

Declare any personal, financial or family interest that could influence or appear to influence your work, when it arises and at the yearly attestation. Register: compliance/conflicts-of-interest-register.

5.4 Fair competition

We compete on merit. We do not agree prices, bids, markets or customers with competitors, and we leave any meeting where such topics come up.

5.5 Trade controls and sanctions

We screen customers, suppliers and shipments and follow the export control and sanctions laws that apply. Procedure: compliance/sanctions-compliance-procedure.

5.6 Fraud and money laundering

We do not falsify records, misstate results or help anyone commit fraud or launder money. Report suspicions through the channels in section 3.

6. Information and assets

7. Communities and the wider world

8. Breaches, waivers and discipline

Breaches can lead to disciplinary action up to dismissal and may be reported to authorities. Investigations are fair, confidential and proportionate. Only [the board or its audit committee] may grant a waiver for a director or executive officer; waivers are recorded and disclosed where law or listing rules require.

9. Governance, training and attestation

10. Legal context examples

As of October 2026 (not legal advice; check the current official text):

11. References

Standard and licence note

Structure aligned with ISO 37301:2021, Compliance management systems, Requirements with guidance for use (with Amd 1:2024), and ISO 37001:2025, Anti-bribery management systems, Requirements with guidance for use. Only names, editions and clause numbers are cited; the code text, decision test, tables and guidance are original text written for this collection and reproduce no wording from the standards. The legal examples are dated summaries and the worked example is fictional. Check the current editions and laws before use. This is a documentation format, not legal advice.

Official text: ISO, purchase or licensed access: https://www.iso.org/standard/75080.html (ISO 37301) and https://www.iso.org/standard/85816.html (ISO 37001), also available from national standards bodies.

Template licence: MIT.