What is true when developing rules for organizational codes of conduct?