Skip to main content
Policy Authority
Category: Ethics and Culture

Integrity and Ethical Values

Also known as: Integrity, Ethical Values
Simply put

Integrity means consistently acting with honesty, fairness, and decency, and living in accordance with one's ethical and moral values even when no one is watching. Ethical values are the underlying principles that guide behavior and decisions toward what is considered right. Together, they form the moral foundation on which trustworthy conduct is built.

Formal definition

Integrity and ethical values refer to the personal and organizational commitment to consistently act according to established moral principles, characterized by honesty, fairness, and decency. Integrity is commonly understood as the firm adherence to a code of moral values, distinct from morality (beliefs about right and wrong) and ethics (the rules that guide how one should behave). In a governance context, these attributes are typically treated as foundational qualities that shape the ethical climate within which structures, roles, and decision rights operate; the evidence provided addresses the concept at the level of individual moral character rather than specifying particular framework requirements or control mechanisms.

Why it matters

Integrity and ethical values form the moral foundation on which trustworthy conduct rests. Because integrity involves acting consistently according to one's ethical and moral values even when no one is watching, it becomes especially significant in governance contexts where structures, roles, and decision rights depend on the honesty and fairness of the people exercising them. Where policies and controls define what is expected, integrity influences whether those expectations are actually honored in practice, including in situations where oversight is limited.

In many governance frameworks, the ethical climate set by leadership and shared moral values shapes how an organization behaves under pressure. Honesty, fairness, and decency are commonly treated as indispensable moral qualities rather than optional preferences, and their presence or absence can affect the reliability of the decisions and conduct that governance arrangements are intended to direct. It is worth noting that integrity operates at the level of individual and organizational character; it complements but does not replace formal control mechanisms.

Distinguishing integrity from related concepts helps clarify why it matters. Morality concerns beliefs about what is right or wrong, ethics concerns the rules that guide how one should behave, and integrity concerns the consistent alignment of one's actions with those values. A person or organization may articulate ethical rules yet fail to act on them; integrity is precisely the quality of closing that gap between stated values and actual conduct.

Who it's relevant to

Governance professionals
Those responsible for organizational structures, roles, and decision rights rely on integrity and ethical values as the moral foundation that underpins trustworthy conduct within those arrangements. This entry addresses the concept at the level of character and ethical climate rather than prescribing specific governance controls or framework clauses.
Boards and senior leadership
Leaders help set the ethical climate through their own consistent adherence to honesty, fairness, and decency. Because integrity is demonstrated most clearly when acting on values is costly or unobserved, leadership conduct can signal the standards expected throughout an organization.
Compliance and ethics practitioners
Professionals working on codes of conduct and ethics programs draw on the distinction between morality (beliefs about right and wrong), ethics (rules guiding behavior), and integrity (living consistently by those values). This entry does not cover implementation specifics, tooling, or legal advice for such programs.

Inside Integrity and Ethical Values

Tone at the Top
The commitment demonstrated by the board and senior management to ethical conduct, communicated through their own behavior, decisions, and messaging. In many governance frameworks, including COSO's internal control model, this is treated as a foundational element of the control environment that influences the organization's overall integrity.
Standards of Conduct
Documented expectations, commonly expressed through a code of conduct or code of ethics, that articulate the ethical values and behavioral norms the organization expects of its personnel and, where relevant, third parties. These standards typically translate broad values into more concrete guidance.
Evaluation of Adherence
Processes for assessing whether individuals and the organization act consistently with the stated standards of conduct. This may involve monitoring, performance evaluation, and management review, and is generally distinct from independent assurance over those processes.
Addressing Deviations
Mechanisms for identifying, escalating, and remediating departures from expected conduct in a timely manner. This commonly includes reporting channels, investigation processes, and consistent application of consequences.
Relationship to the Control Environment
Integrity and ethical values are frequently positioned as a component of the control environment, which sets the overall behavioral and cultural context in which governance, risk management, and compliance activities operate. The concept spans governance and compliance pillars and can influence risk culture.

Common questions

Answers to the questions practitioners most commonly ask about Integrity and Ethical Values.

Is 'integrity and ethical values' just another way of saying an organization has a code of conduct?
No. A code of conduct is one artifact that may articulate expected standards of behavior, but integrity and ethical values refer more broadly to the tone, culture, and behavioral norms that shape how people actually act. In many governance frameworks, this concept is treated as a foundational element of the control environment rather than as any single document. A code of conduct can exist on paper without the underlying values being embedded in practice, and the presence of the document alone does not evidence that the values operate effectively.
Does establishing integrity and ethical values guarantee that misconduct or fraud will not occur?
No. Integrity and ethical values contribute to a control environment that may reduce the likelihood of misconduct, but they do not eliminate it. No cultural or control element can guarantee outcomes, because individuals may act contrary to stated norms and controls can be overridden or circumvented. This concept is typically viewed as one influence on behavior that operates alongside, not in place of, other controls and oversight mechanisms.
Who within an organization is typically responsible for setting integrity and ethical values?
In many governance models, responsibility for setting the tone begins with the board and senior management, whose conduct and messaging influence the wider organization. Management generally has responsibility for translating those values into day-to-day expectations, policies, and behaviors. This is commonly regarded as a management and governance responsibility rather than one owned solely by any single function such as compliance or internal audit.
How can integrity and ethical values be communicated across an organization?
Communication commonly occurs through a combination of formal and informal channels, which may include codes of conduct, policies, training, leadership messaging, and the observed behavior of those in authority. In many frameworks, consistency between stated expectations and actual conduct is emphasized, because inconsistency can undermine the perceived legitimacy of the stated values. The appropriate mix of channels typically depends on the organization's size, structure, and context.
How might an organization assess whether its integrity and ethical values are operating effectively?
Assessment often looks beyond whether documents exist to whether behaviors are consistent with stated expectations. Indicators may include how deviations are identified and addressed, whether individuals feel able to raise concerns, and whether conduct at senior levels aligns with articulated values. Because this element concerns culture and behavior, it can be difficult to measure directly, and evaluation commonly relies on a range of qualitative and indirect indicators rather than a single metric. Independent assurance functions may evaluate these matters, distinct from management's own responsibility to establish them.
How does integrity and ethical values relate to other elements of the control environment?
In many frameworks, integrity and ethical values are treated as a foundational element that influences the effectiveness of other components, such as governance oversight, assignment of authority and responsibility, and accountability mechanisms. Weakness in this area may affect how reliably other controls function, because controls depend in part on the willingness of individuals to apply them as intended. The relationship is generally described as interdependent rather than as one element operating in isolation.

Common misconceptions

A code of conduct on its own establishes integrity and ethical values within an organization.
A written code is one element among several. In many frameworks, the concept also depends on demonstrated tone at the top, processes to evaluate adherence, and mechanisms to address deviations. A document without supporting behavior and processes is generally considered insufficient.
Integrity and ethical values are primarily a compliance function's responsibility.
While compliance functions often support these efforts, responsibility for setting and modeling ethical values typically rests with the board and senior management as part of governance and the control environment. This concept spans more than one pillar and is not owned by a single function.
Assessing adherence to ethical standards is the same as providing independent assurance over them.
Evaluating adherence is commonly a management activity, whereas independent assurance over the design and operation of such processes is typically performed by an objective function. These roles should be kept distinct to preserve independence and objectivity.

Best practices

Ensure the board and senior management visibly and consistently model the ethical values they expect, recognizing that tone at the top is commonly regarded as foundational to the control environment.
Document standards of conduct in a code that translates broad values into concrete behavioral expectations, and extend those standards to relevant third parties where appropriate.
Establish processes to evaluate adherence to the standards of conduct as part of ongoing management activity, distinct from independent assurance.
Implement accessible reporting channels and defined processes to identify, escalate, and address deviations from expected conduct in a timely and consistent manner.
Apply consequences for departures consistently across levels of the organization to reinforce that the standards apply to everyone.
Periodically review the standards, adherence processes, and remediation mechanisms so they remain aligned with the organization's context and evolving expectations.
a promotional banner asking how ready are you for PCI DSS 4.0? With a call-to-action to get the checklist now.