ING Business Ethics Standards

The ING Values and the ING Behaviours which are set out in the Orange Code and accompanied by our value statement: Integrity above all! are the cornerstone of our corporate culture.

The ING Values and the ING Behaviours

They underlie the ING Bank Śląski Employee Business Ethics Standards that we created. These Standards specify behaviours and ways of conduct that are desirable and the ones that are unacceptable. They are presented in 10 points. 

The document also describes the risk culture rules at the Bank as they are an important aspect affecting the decisions made by managers and employees and the risk that we take. 

ING Bank Śląski also requires its business partners and external employees (that is all people who perform any activities for the Bank and/or on the Bank’s behalf, regardless of their form) to comply with the standards of ethical conduct and it is  implemented by relevant provisions in contracts.

Ten principles of the Bank’s employees business ethics

  • The breach reporting policy is designed to protect the integrity and reputation of the Bank, as well as to mitigate compliance risks that may arise from, among other things, employees' failure to react to observed violations.

    The policy defines how ING Bank Slaski provides the ability to report violations or reasonable suspicions of actual or potential violations of the law, requirements of regulators, the Bank's internal regulations, ethical standards or the occurrence of undesirable behaviour in particular such as discrimination, bullying, harassment, sexual harassment, harassment, aggression, violence, intimidation, violation of personal privacy.

  • Financial and economic crime takes many forms, such as money laundering, corruption, terrorist financing, insider trading and non-compliance with sanctions. Preventing ING Bank Śląski from being used in criminal activities is one of our priorities, because trust in the Bank translates into trust in the financial system. The AML policy specifies requirements and internal controls to ensure compliance with the Bank's requirements in terms of knowing your customer and business partners (KYC - Know Your Customer), limiting the risk of financial, economic or tax crimes on the part of our customers and business partners. 

    See more on KYC

  • ING Bank Śląski takes great efforts to ensure high level of security for information processed at the Bank so that the clients have a firm belief that the Bank is a solid public trust organisation. The Bank strives to maintain the information risk below the limit defined by the risk appetite and not to allow any security incidents that might have a negative impact on the clients.
    While establishing the provisions of its IT security standards, the Bank also takes into consideration regulatory requirements (including but not limited to Recommendation D on the management of information technology and ICT security in banks). The Bank also applies rules compliant with the Standard of Good Practice (SOGP) developed by the Information Security Forum (ISF). It relies on international standards and guidelines: ISO/IEC 27001, COBIT, and PCI DSS.

    The security standards cover all areas that must be regulated with special focus on:

    • cryptography
    • security monitoring
    • connections to/from the Bank’s infrastructure
    • managing the security of third-party services
    • security mechanisms’ testing
    • identity and access management.