The Corporate IT Forum Code of Conduct

Code of Conduct for Participation in the Activities of The Corporate IT Forum Service

Programme in the interests of Subscribers.

• A Registered Contact is an individual nominated by a Subscriber to have access to the Service and whose nomination has been accepted by the Company.
• A Participant is any individual who participates in an Activity of the Service to include but not limited to Registered Contacts, persons nominated by a Supplier and whose nomination has been accepted by the Company and guests from organisations eligible to subscribe to the Service.
• tISS is the Service's Information Security Service.
• An Activity of the Service includes but is not limited to any event, conference, workshop, access and input on the Service website including participation in the Question & Answer service and the receipt of any document prepared by the Service.

Participation

A Participant must have the relevant knowledge and experience of IT for that Activity.

As a Participant you will:

- reciprocate your knowledge and experience with other Participants and will provide helpful input to issues as they arise;

• conduct yourself with integrity and respect the safe and trusted environment which the Service provides;
• declare any interests if you are involved in the management of other IT, user or security organisations or user groups;
• provide proof of identity if requested to do so at registration for an Activity (an ID card/pass or business card being sufficient for this purpose);
• ensure that any references you might make about competitors and their products are objective;
• not use your participation in any Activity as a sales or consulting opportunity.

- In addition, if you are a Registered Contact of tISS:

• you are a security professional with knowledge and experience in the information security field and
• you will not allow anyone to stand in for you at any tISS Activity unless that substitute is also a Registered Contact of tISS, or unless your tISS Principal Contact has submitted a written request to the Service, and had it approved to allow a specialist colleague to temporarily substitute for you at the tISS Activity.

Confidentiality

• Direct attribution of quotes to specific participants in any reporting of discussions without their explicit consent is not allowed, i.e. 'The Chatham House Rule': When a meeting or part thereof is held, Participants are free to use the information received to assist their own organisation in the implementation of good practice, but neither the identity nor the affiliation of the speakers, nor that of any other Participant or Subscriber, may be revealed.
• You are free to use within your organisation the information and materials received during an Activity to promote product and service development provided that such use is not detrimental to other Participants or Subscribers. You must not divulge the identity of any Participant or Subscriber and all information which you distribute or references which you make must be in anonymous and non-attributable form. You will ensure that any recipient of information and materials within your organisation respects the high levels of confidentiality required.
• You may not disclose any information or materials obtained during an Activity to any third party organisation unless such disclosure and the format for disclosure has been agreed in advance in writing by both Subscribers and the Company.

Breaches of the Code of Conduct

Any breach on your part of this Code of Conduct will be reported to the Company's Chief Executive and the Head of IT for the organisation which you represent and may result in the loss of an individual's right to participate in any Activity of the Service.

Copyright and Disclaimer

• You acknowledge that any intellectual property in any information and materials produced by the Company for the purposes of an Activity shall belong to and be the sole property of the Company.
• The content of information and materials produced by the Company is intended for your general information only and is not intended to address your particular requirements. In particular the content does not constitute any form of advice by the Company or the Participant who has contributed it to be relied upon by you in making any specific decisions.
• You agree that in using information materials produced by the Company, the Company will not be liable to you for any loss or damage.