⚡ Direct Answer Summary (AI Overview / Key Takeaway)
Standards of integrity, anti-corruption, federal compliance, and workforce accountability for all eTrepid personnel.
eTrepid Code of Ethics & Business Conduct
Governing Standard: FAR Part 3 / CMMC Code of Professional Conduct (CoPC)
1. Purpose and Scope
eTrepid Inc. is committed to operating with unyielding integrity, professional competence, and strict compliance with all applicable statutory and contractual mandates. As a trusted Managed Security Service Provider (MSSP) and External Service Provider (ESP) supporting the Defense Industrial Base (DIB) and regulated enterprises, our reputation rests on ethical conduct and accountability.
This Code of Ethics & Business Conduct applies to all eTrepid directors, executive officers, full-time employees, part-time staff, and authorized contractors across all operational divisions and service offerings.
2. Core Ethical Standards
2.1 Defense Industrial Base Integrity & Professional Conduct
Adherence to CMMC CoPC: All personnel conducting compliance readiness assessments, security reviews, or technical implementations must adhere strictly to the CMMC Code of Professional Conduct (SRC-005). Factual assessment data must never be falsified, exaggerated, or concealed.
Truth in Advertising & Claims: eTrepid makes only verifiable, defensible assertions regarding its security posture, SPRS scores, certifications, and operational capabilities. Marketing claims must align with demonstrated technical reality.
Antitrust & Fair Competition: eTrepid competes vigorously and fairly in the commercial and government marketplace, complying with all federal antitrust laws and FAR Part 3 procurement integrity provisions.
2.2 Conflicts of Interest & Objective Advice
Personnel must avoid any personal, financial, or professional relationship that conflicts, or appears to conflict, with eTrepid's business obligations or the best interests of our clients.
Any secondary employment, consulting, or personal investment in competing security firms or vendor suppliers must be disclosed to Corporate Governance.
Controlled Unclassified Information (CUI): Personnel handling CUI or Covered Defense Information (CDI) must adhere strictly to DFARS 252.204-7012 requirements and eTrepid enclave boundary procedures. Unauthorized dissemination of CUI is a federal violation.
Client Confidentiality: Client network configurations, vulnerability data, penetration test results, and compliance gaps are proprietary client secrets. Personnel are bound by perpetual non-disclosure obligations.
2.4 Equal Opportunity and Harassment-Free Workplace
eTrepid provides a professional work environment free from discrimination, harassment, and retaliation, respecting the dignity and diversity of all individuals regardless of race, gender, religion, national origin, disability, or protected veteran status.
3. Compliance and Reporting
Mandatory Reporting: Any employee who observes or reasonably suspects a violation of this Code, federal procurement rules, or data protection laws has an affirmative obligation to report it immediately.
Reporting Channels: Reports may be submitted to designated management, HR, or confidentially via the eTrepid Sovereign Trust Center Intake Form (Select Topic: Ethics & Business Conduct).
Non-Retaliation: eTrepid strictly enforces a zero-tolerance policy against retaliation of any kind against individuals who report potential violations in good faith.
