--- title: Do's and Don'ts of Code of Conduct and Ethics Training for Employees description: By following these Do's and Don'ts, companies can create an impactful code of conduct and ethics training that is engaging and relevant to employees. image: https://blog.cybercoach.com/hubfs/cybercoach%20code%20of%20conduct%20training.png --- [![CyberCoach Full Logo with Bot Icon](https://blog.cybercoach.com/hubfs/CyberCoach_Full_Logo_Black-2.svg)](https://www.cybercoach.com?hsLang=en) - PRODUCT ## CyberCoach at a glance An industry-changing platform built on peer-reviewed research: phishing, secure coding, and AI skills training, delivered directly in Teams, Slack, or the browser. ### [The Science Behind CyberCoach Why traditional phishing simulations don't work, according to peer-reviewed research from ETH Zurich.](https://www.cybercoach.com/science-behind-cybercoach?hsLang=en) ### [Is Phishing Simulation Legal Under GDPR? 9 steps GDPR requires before you phish your employees — and a new simulation approach that doesn't need any of them.](https://www.cybercoach.com/legal-basis-phishing-simulation?hsLang=en) ### [Pricing Flexible plans, also monthly. ](https://www.cybercoach.com/pricing?hsLang=en) ### [Blog Latest insights into security awareness and what's new with CyberCoach.](https://blog.cybercoach.com) ### [Customer Stories Read more about how CyberCoach has helped organizations across different industries modernize their approach to security and AI training. ](https://www.cybercoach.com/customer-stories?hsLang=en) ### [OT Security Training Targeted training for employees working with OT technology.](https://www.cybercoach.com/ot-security-training?hsLang=en) - [AI TRAINING](https://www.cybercoach.com/ai-security-training?hsLang=en) ## [AI Training The most comprehensive role-based AI security and productivity training — built to help employees use AI effectively and safely, and keep your organization compliant with the EU AI Act.](https://www.cybercoach.com/ai-security-training?hsLang=en) ### [AI Security Training Why choose CyberCoach for your AI security training needs?](https://www.cybercoach.com/ai-security-training?hsLang=en) ### [EU AI Act Training Requirements: What You Actually Have To Do AI literacy training has been mandatory since February 2025.  ](https://www.cybercoach.com/eu-ai-act-training-requirements?hsLang=en) - [FOR DEVELOPERS](https://www.cybercoach.com/secure-development-training-for-developers?hsLang=en) ## [For Developers Go beyond OWASP Top10 and offer hands-on interactive training for technical roles in secure coding and efficient use of AI. ](https://www.cybercoach.com/secure-development-training-for-developers?hsLang=en) ### [Secure Coding Skills Meet ISO/IEC 27001 or SOC 2 requirements for secure development practices with no-nonsense training for your developers and other technical roles, directly in Microsoft Teams or Slack chat. ](https://www.cybercoach.com/secure-development-training-for-developers?hsLang=en) - [COMPANY](https://www.cybercoach.com/about-us?hsLang=en) ## [About us We're growing into the most diverse training platform company on the planet.](https://www.cybercoach.com/about-us?hsLang=en) ### [About Us Get to know our international team.](https://www.cybercoach.com/about-us?hsLang=en) ### [Contact Us Get in touch.](https://www.cybercoach.com/contact-us?hsLang=en) ### [Careers We are hiring.](https://www.cybercoach.com/careers?hsLang=en) ### [Partner with us Learn more about our partner program.](https://www.cybercoach.com/partnerships?hsLang=en) [FREE TRIAL](https://www.cybercoach.com/free-trial?hsLang=en) [GET A DEMO](https://meetings-eu1.hubspot.com/maria-bique/cybercoach-demo?uuid=88959d26-2ff7-4dd0-8ebd-dd43eb31443e) Training # Do's and Don'ts of Code of Conduct and Ethics Training for Employees By following these Do's and Don'ts, companies can create an impactful code of conduct and ethics training that is engaging and relevant to employees. [Maria Bique](https://blog.cybercoach.com/author/maria-bique) Apr 19, 2023 [Code of Conduct](https://blog.cybercoach.com/tag/code-of-conduct) [Training](https://blog.cybercoach.com/tag/training) ### Share this article [mailto:?subject=Check%20out%20https://blog.cybercoach.com/code-of-conduct-training&utm_medium=social&utm_source=email%20&body=Check%20out%20https://blog.cybercoach.com/code-of-conduct-training&utm_medium=social&utm_source=email](mailto:?subject=Check%20out%20https://blog.cybercoach.com/code-of-conduct-training&utm_medium=social&utm_source=email%20&body=Check%20out%20https://blog.cybercoach.com/code-of-conduct-training&utm_medium=social&utm_source=email) ### Subscribe ### Subscribe ![](https://blog.cybercoach.com/hubfs/cybercoach%20code%20of%20conduct%20training.png) Let's face it, most Code of Conduct training is just a snoozefest with the sole purpose of ticking a box. Employees are forced to watch boring videos or slideshows, and by the end of it, they're more confused than when they started. I've been through it. You have probably been too.  ##### ![Screenshot of our Code of conduct training in CyberCoach in Mobile Teams](https://blog.cybercoach.com/hs-fs/hubfs/code%20of%20conduct%20training.png?width=200&height=434&name=code%20of%20conduct%20training.png) Why is delivering impactful compliance training so difficult? It's definitely not because employees don't care. It's not even because people are inherently resistant to changing their behavior. Most people *want* to do the right thing and seek practical guidance. The main challenge is making training relevant and practical enough, so that employees can actually apply what they learn in real-life situations.  Training can't possibly cover all imaginable daily situations, so it's important to coach employees to think for themselves. Trust is motivating, so you want to offer training that builds employees' self-efficacy and confidence. You want employees to feel trusted to make the right call, instead of training them to follow a strict set of rules.  Sometimes Code of Conduct trainings avoid practical topics because they are uncomfortable and it feels risky. What if you end up hurting someone with training that is intended to protect everyone? But if you are afraid of addressing difficult topics, how can you expect your employees to feel like they can talk about them and report them? Code of Conduct training is really where you need to "eat your own dog food". You can't teach inclusion inclusively, without peer-review and systematically involving a broad team to ensure you are covering what matters. ##### OK. So effective Code of Conduct training is about inclusive and individualized coaching that doesn't shy away from covering sensitive and controversial topics in practice. How do we build that? Let's look at some do's and don'ts. Whether you have an entire team of learning experts to design engaging content tailored to your audience, or need to hack something together with limited resources, these principles can help you build training that works.  | **Do's** | | --- | | Provide anonymous training and record training completion (to demonstrate compliance) with employee consent after training has been successfully been passed.  | | Be clear about what you expect from employees in specific situations. | | Educate on the real harm even unconscious discrimination and misconduct can cause. | | Encourage low-threshold reporting, even anonymously.  | | Include scenarios relating to online behavior and social media. | | Include scenarios relating to current issues to keep training fresh and relevant. | | Gather feedback and use it to improve the training program in the future. | | **Don'ts** | | --- | | Don't be fuzzy about what identifiable information you collect about employee responses and how you use that information.  | | Don't avoid taking a stance on sensitive topics. | | Don't "motivate" employees through fear of disciplinary action or termination. Employees should not have to fear punishments for honest mistakes that they report in a timely manner.  | There's a science to creating effective learning experiences, regardless of the training topic. Take a look at some of our other blog posts for more tips on how you can leverage it in your training program: [Four Tips for Creating Effective Training](https://blog.cybercoach.com/four-tips-for-effective-training?hsLang=en) and [The Pedagogy Behind an Effective Security Awareness Training Program](https://blog.cybercoach.com/dialogic-learning?hsLang=en). ##### Still feel like you don't know how to get started? We strive to enable all companies to deliver quality Code of Conduct training that works without a whole team available for creating it. CyberCoach trainings are always about practical daily work scenarios and are easily configurable to reflect the specific policies of the company.  With sensitive topics such as those covered in Code of Conduct training, safe and anonymous learning spaces like CyberCoach are even more important. By allowing employees to answer openly and honestly, without fear of judgment or retaliation, companies can promote a culture of inclusion and psychological safety. CyberCoach is always available directly in Teams and Slack, making it easy for employees to complete the training in apps they are already using. ##### What's up with the doggo in the first picture? Some of you may remember the scandal dog meme from years ago. Ultimately, Code of Conduct training serves to avoid scandals. With quality Code of Conduct training, no one needs to look as guilty as this scandalous dog. So, naturally, it found its way on the training completion badge.  ##### Not amused? We asked ChatGPT to tell us some jokes about the scandal dog meme and our Code of Conduct training. Here are the best ones: > "*Why did the scandal dog switch to CyberCoach's Code of Conduct training? To learn how to bury the bones, not the company!*" > *"Why did the scandal dog take CyberCoach's Code of Conduct training? To clean up his paw-sonal brand!"* > *"What did the scandal dog say after completing CyberCoach's Code of Conduct training? 'Looks like I won't be in the doghouse anymore, thanks to CyberCoach!"* ##### Still not amused? Try learning with CyberCoach. [Get Started Free](https://www.cybercoach.com/free-trial?hsLang=en) ## Similar posts Awareness ### [EU AI Act: A Comprehensive Guide for Navigating it with Your Organization](https://blog.cybercoach.com/navigating-the-eu-ai-act-a-comprehensive-guide-for-your-organization?hsLang=en) EU AI Act explained in this article: requirements, timeline, who must comply, and how CyberCoach helps organizations meet those requirements. Maria Bique Nov 28, 2024 Cybersecurity ### [How to Choose a Secure Development Training Platform: A Complete Guide](https://blog.cybercoach.com/how-to-choose-a-secure-development-training-a-complete-guide?hsLang=en) Learn how to choose the best Secure Development Training to build secure code, meet compliance, and support devs of all skill levels. Unai Eguiguren Jun 5, 2025 Cyber Social Responsibility ### [Liquid C2 and CyberCoach partner to bring a safer digital environment to African businesses](https://blog.cybercoach.com/liquid-c2-and-cybercoach-partner?hsLang=en) We are proud to collaborate with Liquid C2, whose scale, values, and commitment to digital empowerment in Africa align strongly with our mission. Dana Paredes Mar 11, 2026 ### Get notified of what's going on in AI and security awareness and compliance **Expert Tips:** Stay informed with curated content, expert opinions, and case studies that are relevant to your organization's security awareness strategy. **Special Offers:** Access to CyberCoach promotions and campaigns.  **Stay Informed:** Get the latest insights and updates on security and AI compliance trends, threats, and best practices delivered directly to your inbox. ![cybercoach_logo_white.svg.2023_03_15_16_58_04.0](https://blog.cybercoach.com/hubfs/cybercoach_logo_white.svg.2023_03_15_16_58_04.0.svg) ### Product - [For Developers](https://www.cybercoach.com/secure-development-training-for-developers?hsLang=en) - [AI Security](https://www.cybercoach.com/ai-security-training?hsLang=en) - [Manage Subscription](https://billing.stripe.com/p/login/28o4jRclF4gab1C6oo) - [FAQ](https://www.cybercoach.com/faq?hsLang=en) ### Connect - [Partner Program](https://www.cybercoach.com/partnerships?hsLang=en) - [Careers](https://www.cybercoach.com/careers?hsLang=en) - [For Media](https://www.cybercoach.com/media?hsLang=en) - [Contact Us](https://www.cybercoach.com/contact-us?hsLang=en) ### Legal - [Privacy](https://www.cybercoach.com/cybercoach-website-privacy?hsLang=en) - [General Terms](https://www.cybercoach.com/general-terms?hsLang=en) ### Company - [About Us](https://www.cybercoach.com/about-us?hsLang=en) - [Blog](https://blog.cybercoach.com) - [ESG Policy](https://www.cybercoach.com/esg-policy?hsLang=en) © 2026 CyberCoach All rights reserved ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Maria Bique", "url" : "https://blog.cybercoach.com/author/maria-bique" }, "dateModified" : "2024-10-04T19:16:31.189Z", "datePublished" : "2023-04-19T22:27:37.000Z", "headline" : "Do's and Don'ts of Code of Conduct and Ethics Training for Employees", "image" : [ "https://blog.cybercoach.com/hubfs/cybercoach%20code%20of%20conduct%20training.png" ], "mainEntityOfPage" : { "@id" : "https://blog.cybercoach.com/code-of-conduct-training", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.cybercoach.com/hubfs/cybercoach_marketplace_icon.svg" }, "name" : "CyberCoach" } } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.cybercoach.com/#organization", "@type" : "Organization", "foundingDate" : "2019", "legalName" : "Cult Security", "logo" : "https://www.cybercoach.com/hubfs/CyberCoach_Full_Logo_Black-2.svg", "name" : "CyberCoach", "sameAs" : [ "https://www.linkedin.com/company/cult-security", "https://x.com/cybercoachUS", "https://www.instagram.com/cybercoachus/", "https://www.youtube.com/@CyberCoachOfficial" ], "url" : "https://www.cybercoach.com/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.cybercoach.com/#software", "@type" : "SoftwareApplication", "applicationCategory" : "BusinessApplication", "applicationSubCategory" : "Security awareness and AI skills training", "availableLanguage" : [ "English", "Spanish", "Portuguese (Brazil)", "Portuguese (Portugal)", "French", "Dutch", "German", "Swedish", "Finnish" ], "description" : "CyberCoach is a role-based security awareness, privacy and AI skills training platform that runs as a conversational app inside Microsoft Teams, Slack or a web browser. Employees practice AI skills and responding to social engineering in short, psychologically safe scenario-based sessions. Learning is anonymous while successful completions are recorded per user so the organization can evidence training completion for compliance. CyberCoach can also run on pseudonymous identifiers such as Slack or Microsoft UUIDs, with no personal data shared with CyberCoach.", "featureList" : [ "Conversational phishing and social engineering challenges", "Role-based training programs for technical and non-technical roles", "AI security and AI use training", "Secure coding training for developers", "OT security training", "Custom content creation", "Compliance assessments (ISO/IEC 27001, GDPR, AI compliance)", "Anonymous learning with per-user completion records for compliance", "Optional pseudonymous deployment using Slack or Microsoft UUIDs" ], "name" : "CyberCoach", "offers" : [ { "@type" : "Offer", "description" : "Cover the basics.", "name" : "Starter", "price" : "49", "priceCurrency" : "EUR" }, { "@type" : "Offer", "description" : "Broad topic coverage, custom content, hosted kick-off.", "name" : "Advanced", "price" : "159", "priceCurrency" : "EUR" }, { "@type" : "Offer", "description" : "Full coverage, 24/7 AI chat, compliance assessments, hosted kick-off.", "name" : "Complete", "price" : "179", "priceCurrency" : "EUR" } ], "operatingSystem" : "Microsoft Teams, Slack, Web browser, iOS, Android", "publisher" : { "@id" : "https://www.cybercoach.com/#organization" }, "url" : "https://www.cybercoach.com/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.cybercoach.com/#faq", "@type" : "FAQPage", "mainEntity" : [ { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "CyberCoach is a security awareness, privacy and AI skills training platform that runs inside Microsoft Teams, Slack or a web browser. Employees practice role-based skills such as responding to social engineering, ethical and productive use of AI and even secure coding skills in short conversational scenarios. Learning is anonymous, while successful completions are stored so the organization can evidence training completion for compliance frameworks such as ISO/IEC 27001 and SOC 2." }, "name" : "What is CyberCoach?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Yes, but not by sending deceptive emails to employees. CyberCoach uses conversational phishing challenges in which employees practice recognizing and responding to social engineering scenarios in Teams, Slack or the browser. Peer-reviewed research, including Lain et al. (ETH Zurich, 2022 and 2024), finds that traditional email-based simulated phishing does not reduce risk and can increase misplaced trust in the inbox." }, "name" : "Does CyberCoach do phishing tests?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "No. Learning is anonymous: how an employee answered a training scenario is never visible to managers or administrators. What is recorded is successful completion, so the organization can evidence who has completed required training for compliance purposes. This is privacy by design: the sensitive part of the interaction stays private, and only the completion fact is retained." }, "name" : "Are individual employee answers visible to managers?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Yes. CyberCoach can be deployed using pseudonymous identifiers, such as Slack or Microsoft UUIDs, so no personal data is shared with CyberCoach. Compliance reporting still works: the mapping between a UUID and a real person is resolved only for authenticated and authorized administrators within the customer's own organization." }, "name" : "Can CyberCoach be used without sharing personal data?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "CyberCoach supports security awareness and secure development training requirements under ISO/IEC 27001 and SOC 2, and includes assessments covering ISO 27001, GDPR and AI compliance on the Complete plan." }, "name" : "Which compliance requirements does CyberCoach support?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "CyberCoach is available in English, Spanish, Portuguese (Brazil), Portuguese (Portugal), Polish, French, Dutch, German, Swedish, Norwegian, Danish and Finnish, with more languages in development." }, "name" : "Which languages does CyberCoach support?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Plans start at 49 EUR per month for Starter, 159 EUR per month for Advanced and 179 EUR per month for Complete, available monthly or yearly, including through the Microsoft Azure Marketplace." }, "name" : "How much does CyberCoach cost?" } ] } ```