Compliance
ING Business Ethics Standards
The ING Values and the ING Behaviours which are set out in the Orange Code and accompanied by our value statement: Integrity above all! are the cornerstone of our corporate culture.
They underlie the ING Bank Śląski Employee Business Ethics Standards that we created. These Standards specify behaviours and ways of conduct that are desirable and the ones that are unacceptable. They are presented in 10 points.
The document also describes the risk culture rules at the Bank as they are an important aspect affecting the decisions made by managers and employees and the risk that we take.
ING Bank Śląski also requires its business partners and external employees (that is all people who perform any activities for the Bank and/or on the Bank’s behalf, regardless of their form) to comply with the standards of ethical conduct and it is implemented by relevant provisions in contracts.
Ten principles of the Bank’s employees business ethics
Putting sustainable at the heart
We continuously work on our aspirations with regards to climate change, the environment, human rights and an inclusive society.
Customer centricity
We protect customers rights and interests.
Unfair competition and Market abuse
We safeguard fair competition and fair markets.
Know Your Customer
We protect ING from being misused to facilitate financial economic crimes and tax offences.
A safe environment
We create and maintain a safe, respectful and inclusive working environment.
Speaking up
We speak up and report suspected or actual criminal conduct, unethical conduct, or other misconduct by or within ING.
Innovation, technology and data
We treat all information with care and communicate responsibly.
Beware of what you share
We treat all information with due care and communicate responsibly.
Conflicts of interest
We identify potential conflicts of interest and take action.
Anti-bribery & corruption
We apply zero-tolerance approach to bribery and corruption.
-
The breach reporting policy is designed to protect the integrity and reputation of the Bank, as well as to mitigate compliance risks that may arise from, among other things, employees' failure to react to observed violations.
The policy defines how ING Bank Slaski provides the ability to report violations or reasonable suspicions of actual or potential violations of the law, requirements of regulators, the Bank's internal regulations, ethical standards or the occurrence of undesirable behaviour in particular such as discrimination, bullying, harassment, sexual harassment, harassment, aggression, violence, intimidation, violation of personal privacy.
-
Financial and economic crime takes many forms, such as money laundering, corruption, terrorist financing, insider trading and non-compliance with sanctions. Preventing ING Bank Śląski from being used in criminal activities is one of our priorities, because trust in the Bank translates into trust in the financial system. The AML policy specifies requirements and internal controls to ensure compliance with the Bank's requirements in terms of knowing your customer and business partners (KYC - Know Your Customer), limiting the risk of financial, economic or tax crimes on the part of our customers and business partners.
-
ING Bank Śląski takes great efforts to ensure high level of security for information processed at the Bank so that the clients have a firm belief that the Bank is a solid public trust organisation. The Bank strives to maintain the information risk below the limit defined by the risk appetite and not to allow any security incidents that might have a negative impact on the clients.
While establishing the provisions of its IT security standards, the Bank also takes into consideration regulatory requirements (including but not limited to Recommendation D on the management of information technology and ICT security in banks). The Bank also applies rules compliant with the Standard of Good Practice (SOGP) developed by the Information Security Forum (ISF). It relies on international standards and guidelines: ISO/IEC 27001, COBIT, and PCI DSS.The security standards cover all areas that must be regulated with special focus on:
- cryptography
- security monitoring
- connections to/from the Bank’s infrastructure
- managing the security of third-party services
- security mechanisms’ testing
- identity and access management.