In the posts collected here we will explore how to assess a) general codes of conduct; b) other codes of conduct (e.g., for board members, suppliers); c) stand-alone policies; and d) C&E procedures of various kinds, both risk area specific (e.g., anti-bribery) and general program ones. We will also discuss assessment of the policy management process.