An internal auditor must suggest a policy aspect to be included in an organization's code of ethics.Which of the suggestions below would be the most effective?