Do you believe organizations both large and small should be required to create and deploy a Code of Conduct with regards to their Cybersecurity personnel teams?

Read the following article: Practical Cybersecurity Ethics, Ivan Flechais, George Chalhoub. https://arxiv.org/pdf/2311.10165

Answer the following questions:

Do you believe organizations both large and small should be required to create and deploy a Code of Conduct with regards to their Cybersecurity personnel teams?
Should such a Code of Conduct be legislated and/or mandated by government or stay an option for individual business adoption?
This question requires you think for a few minutes about your own moral code. If you see a violation take place in your workplace, should you report it even if it is not illegal?
Do you believe an organization's ethical standards should override your ethical standards?