Software Engineering Code of Ethics

1. PUBLIC - Software engineers shall act consistently with the public interest. 2.CLIENT AND EMPLOYER - Software engineers shall act in a manner that is in the best interests of their client and employer consistent with the public interest.
2. PRODUCT - Software engineers shall ensure that their products and related modifications meet the highest professional standards possible.
3. JUDGMENT - Software engineers shall maintain integrity and independence in their professional judgment.

After spotting a serious problem, say "No" with evidence.

• Be prepared to back up your assessment.
• Demonstrate exactly how an enemy could get in.
• Estimate the likelihood of the attack.
• Estimate the business loss if it happens.

Making security recommendations is often a political process.

• Security is engineering; it's not an absolute goal to be pursued at any cost.
• There are always legacy systems you can't touch.