Templates / Attestation Flow

Code of conduct (SOC 2) template

For every employee confirming the standards of behaviour that support the SOC 2 control environment criterion on integrity and ethical values. It covers speaking up without retaliation, includes a two question quiz, allows 30 days and repeats yearly.

• App: Attestation Flow for Confluence
• Category: Governance
• Edition: Picking the pack works in every edition; the paid settings and the starter text need a paid licence
• Re-acknowledge: every 365 days

Note shown to readers:

By acknowledging, you confirm you have read the code of conduct and will act in line with it.

Template. This template is a starting point, not legal advice. Adapt it to your organisation, your contracts and the law that applies to you, and have it reviewed by a qualified professional before you rely on it.

Why we have a code

Our customers trust us with their data and their business. This code describes how everyone at [Company] is expected to behave so that we deserve that trust.

Our standards

• Act honestly and with integrity in every dealing.
• Treat colleagues, customers and partners with respect; we do not tolerate harassment or discrimination.
• Protect confidential information and personal data.
• Avoid conflicts of interest and declare any that arise.
• Follow the law and our policies.

Speaking up

If you see something that breaks this code, raise it with your manager, HR or [speak up channel]. Reports made in good faith are protected; retaliation is itself a breach of this code.

Consequences

Breaches may lead to disciplinary action up to and including dismissal, and may be reported to authorities where the law requires.

Annual confirmation

Everyone confirms once a year that they have read and will follow this code. Owner: [role]. Last reviewed: [date].

Includes 2 quiz questions; the answers are not published here. They are shown only in the app's requirement editor, to the person setting up the requirement, who can change them before saving.

1. You notice a colleague breaking this code. What should you do?
   • Ignore it
   • Raise it with your manager, HR or the speak up channel
   • Post about it on social media
2. Is retaliation against someone who reports a concern in good faith allowed?
   • Yes
   • No

Edit a Confluence page, insert the Attestation Flow macro, open the requirement editor and pick the pack under Start from a policy pack. It fills the note and the due date; with a paid licence it also fills the re-acknowledgement window, the minimum reading time and the quiz, and can add the starter text to the page. Required readers are never preset: you choose them.

• Attestation Flow for Confluence documentation
• Confluence policy templates: all 16 templates