Identity Management Institute Code of Ethics
The Identity Management Institute (IMI)® is committed to promoting excellence, integrity, and accountability across identity and access management, cybersecurity, data protection, and governance, risk, and compliance (GRC).
IMI members and certification holders serve in roles of trust and responsibility where their actions can significantly impact individuals, organizations, and society.
To maintain this trust, members must adhere to the highest ethical and professional standards outlined in the following Code of Ethics.
This Code establishes the foundation for responsible behavior, professional competence, and sound judgment that reflect positively on both the individual and the Institute.
1. Act Ethically and in Accordance with the Law
Members shall conduct themselves with honesty, integrity, and professionalism at all times. They must comply with all applicable local, national, and international laws and regulations governing their professional and personal activities.
Ethical behavior extends beyond legal compliance and includes fairness, respect, accountability, and transparency in all interactions.
2. Report Unethical and Unlawful Acts
Members shall promptly report unethical, unlawful, or fraudulent acts to appropriate authorities, including internal compliance channels, management, or regulatory agencies, as appropriate.
Failure to act on known misconduct undermines the profession’s ethical standards and the trust placed in IMI-certified professionals.
3. Contribute to the Profession and Support Peers
Members shall actively contribute to the growth, development, and maturity of the identity management profession. They shall share knowledge, mentor peers, and promote ethical practices within their organizations and professional communities.
Members are expected to respect diverse perspectives and encourage collaboration to advance the field’s collective expertise.
4. Uphold the Highest Professional Standards
Members shall perform their duties with competence, diligence, and accuracy, striving for excellence in every aspect of their professional work.
Supervisors and managers are responsible for guiding, mentoring, and evaluating subordinates with fairness, professional care, and ethical leadership.
Every task should reflect a commitment to quality, accuracy, and professional integrity.
5. Exercise Diligence, Objectivity, and Honesty
Members shall be truthful and objective in their communications, findings, and recommendations. Decisions must be based on evidence, professional judgment, and ethical reasoning rather than personal interests or external pressure.
Members shall not misrepresent qualifications, capabilities, or results in any form.
6. Commit to Continuous Learning
Members shall pursue ongoing professional development to maintain and enhance their knowledge, skills, and abilities.
They shall stay informed about evolving technologies, industry standards, legal frameworks, and emerging threats in identity and access management.
Continuous learning is essential to maintaining competence and credibility in this dynamic field.
7. Comply with Applicable Standards and Requirements
Members shall adhere to relevant professional, technical, and organizational standards as established by regulatory bodies, public agencies, and employers.
Work must comply with established frameworks, policies, and best practices to ensure lawful, ethical, and practical outcomes.
8. Protect the Reputation of the Institute and the Profession
Members shall uphold the honor and reputation of the Identity Management Institute and the profession as a whole.
They shall refrain from conduct that could discredit IMI, its certifications, or the broader identity management community.
This includes abstaining from defamatory, misleading, or disparaging remarks about the Institute or its representatives.
9. Safeguard Confidential Information
Members shall respect and protect all confidential, proprietary, and sensitive information obtained through professional engagements.
Such information shall not be disclosed or used for personal gain or competitive advantage, and shall be shared only with authorized individuals for legitimate business purposes.
Members must apply due care to prevent unauthorized disclosure or misuse of identity-related data.
10. Disclose and Address Unlawful Acts
Members shall not conceal or ignore unlawful or unethical acts discovered in the course of their professional duties.
They must ensure that such matters are appropriately reported and handled in accordance with applicable laws, regulations, and organizational procedures.
Integrity requires accountability and transparency, even when doing so may be difficult.
11. Avoid Conflicts of Interest
Members shall avoid activities, relationships, or situations that create, or could reasonably be perceived to create, a conflict between personal interests and professional responsibilities.
When potential conflicts arise, members must disclose them to relevant parties and take appropriate steps to eliminate or mitigate them.
12. Refrain from Illegal Activity
Members shall not participate in, facilitate, or condone any illegal activity.
They must avoid association with individuals or organizations engaged in unlawful conduct and act as ethical role models who promote compliance with the law and lawful behavior in all professional settings.
Commitment to the Code
All IMI members, certification candidates, and credential holders agree to abide by this Code of Ethics as a condition of membership and certification.
Violations of this Code may result in disciplinary action, including revocation of membership, certification, or the right to use IMI designations.
By upholding this Code, members affirm their commitment to professional excellence, ethical leadership, and the advancement of secure, trustworthy, and responsible identity management practices worldwide.
