This article discusses the importance of maintaining professional and ethical conduct in computer information systems, including the codes of ethics followed by organizations and the policies and procedures for data privacy. It explores how organizational systems can be examined to meet legislative and organizational requirements. The article also highlights the strategies and technologies used by organizations to ensure the effectiveness of policies and procedures.