Exam CGEIT Topic 9 Question 162 Discussion

After defining the ethical standards for an ethics program, the next step for the enterprise should be to establish a training and awareness program focused on ethics. A training and awareness program can help to communicate the ethical standards to all employees and stakeholders, and educate them on the importance, benefits, and expectations of ethical behavior. A training and awareness program can also help to foster a culture of ethics within the enterprise, and encourage employees to apply the ethical standards in their daily work and decision making. According to ISACA's article on Ethics in IT1, "training is essential to ensure that all staff understand what is expected of them and how to apply ethical principles in their work." Furthermore, according to ISACA's CGEIT Domain 1: Framework for the Governance of Enterprise IT2, "training and awareness are key enablers for embedding an appropriate culture throughout the enterprise." Therefore, establishing a training and awareness program focused on ethics is the best way to implement the ethical standards defined by the enterprise.