Identify ethical behavior that is expected of users and administrators.

Identification should include listing ethical concerns that an administrator may encounter and be expected to handle responsibly, such as

• privacy issues
• nondisclosure of confidential information
• legal use of copyrighted material
• personally identifiable information (PII) (e.g., phone numbers, social security numbers, birth dates).