Discuss the value of having common rules of conduct.

What will be an ideal response?

Common rules of conduct accomplish two valuable things. First, they would provide an easy-to-understand and practical reference to guide each employee in day-to-day behavior. Second, the company could monitor the security performance of its employees using those rules as a basis for enforcement.