14.5 PMI Code of Ethics, Professional Conduct & Continuing Certification (CCR)
Key Takeaways
- The PMI Code of Ethics and Professional Conduct establishes four foundational ethical pillars—Responsibility, Respect, Fairness, and Honesty—each categorized into aspirational standards (ideals practitioners strive to embody) and mandatory standards (enforceable rules whose violation triggers PMI ethics complaints and revocation).
- In business analysis practice, ethical conflicts frequently manifest as pressure from executive sponsors to inflate business case ROI projections, demands from delivery leads to suppress or falsify UAT defect reports, and unmanaged conflicts of interest.
- Certified PMI-PBA professionals possess a mandatory ethical obligation to maintain transparency, report critical project risks and regulatory non-compliance, refuse assignments where unresolvable conflicts of interest exist, and protect intellectual property and confidential customer data.
- Maintaining the PMI-PBA credential requires earning 60 Professional Development Units (PDUs) within a rolling 3-year Continuing Certification Requirements (CCR) cycle, governed by the PMI Talent Triangle.
- Under CCR rules, practitioners must earn a minimum of 35 Education PDUs—including at least 8 PDUs each in Ways of Working, Power Skills, and Business Acumen—while Giving Back activities are capped at a maximum of 25 PDUs (with a maximum of 8 PDUs for Working as a Professional).
14.5 PMI Code of Ethics, Professional Conduct & Continuing Certification (CCR)
[!NOTE] PMI-PBA Examination Alignment: Professional conduct, ethical practice, and certification governance are integrated across the entire PMI-PBA examination. Candidates are expected to apply the PMI Code of Ethics and Professional Conduct to resolve complex, realistic workplace dilemmas involving conflicts of interest, executive pressure to alter business cases or falsify test results, confidential data protection, and statutory reporting obligations. Furthermore, practitioners must master the Continuing Certification Requirements (CCR) framework, including the PMI Talent Triangle requirements (60 PDUs every 3 years; minimum 35 Education PDUs with at least 8 per arm; maximum 25 Giving Back PDUs).
The Strategic Importance of Professional Ethics in Business Analysis
The business analyst occupies a uniquely influential position within an enterprise. BAs serve as the nexus between strategy, finance, executive governance, technical architecture, and end-user operations. They conduct feasibility studies, author business cases, evaluate vendor proposals, prioritize multi-million-dollar backlogs, and validate acceptance test evidence.
Because business analysts hold the pen that defines organizational truth, they are constantly exposed to immense political and organizational pressures:
- Executive sponsors may pressure an analyst to inflate Net Present Value (NPV) forecasts to secure board funding.
- Project managers may demand that an analyst conceal Severity-2 software defects to hit an unmovable contractual deadline and claim an executive bonus.
- Vendors may offer subtle personal inducements, gifts, or kickbacks during software evaluation RFPs.
- Internal teams may pressure an analyst to ignore accessibility standards (WCAG) or bypass statutory privacy protections (GDPR/HIPAA) to accelerate speed to market.
To navigate these dangerous ethical landscapes, PMI enforces the PMI Code of Ethics and Professional Conduct. Compliance with this code is not optional; it is a legally binding condition of applying for, taking, and maintaining the PMI-PBA credential.
+===================================================================================================+
| THE PMI CODE OF ETHICS AND PROFESSIONAL CONDUCT |
+===================================================================================================+
| |
| APPLICABILITY: All PMI members, credential holders (PMI-PBA, PMP), applicants, and volunteers. |
| |
| [ ASPIRATIONAL STANDARDS ] [ MANDATORY STANDARDS ] |
| • Ideals we strive to uphold as • Firm, non-negotiable rules. |
| practitioners. • Violations trigger formal disciplinary |
| • Inspires excellence, but failure to action by the PMI Ethics Review Committee. |
| achieve is not necessarily punishable. • Can result in credential revocation. |
| |
| THE FOUR ETHICAL PILLARS |
| |
| 1. RESPONSIBILITY ──> Ownership of decisions, actions, and consequences. |
| 2. RESPECT ──> High regard for oneself, others, resources, and public safety. |
| 3. FAIRNESS ──> Impartiality, objectivity, transparency, and conflict disclosure. |
| 4. HONESTY ──> Truthfulness in communication, data, estimates, and actions. |
+===================================================================================================+
The Four Ethical Pillars: Deep Breakdown for the BA
The PMI Code of Ethics structures professional conduct around four fundamental pillars, explicitly bifurcating each into Aspirational Standards and Mandatory Standards:
Pillar 1: Responsibility
- Core Definition: The duty to take ownership for the decisions we make or fail to make, the actions we take or fail to take, and the consequences that result.
- Aspirational Standards: Making decisions based on the best interests of society, public safety, and the environment; accepting assignments only when qualified by education or experience.
- Mandatory Standards:
- Upholding all statutory laws, regulations, and organizational governance rules.
- Reporting illegal or unethical conduct to appropriate management bodies (and public authorities if required by law).
- Bringing violations of the PMI Code of Ethics to the attention of PMI for investigation.
- Protecting intellectual property, proprietary corporate secrets, and confidential customer records.
Pillar 2: Respect
- Core Definition: The duty to show a high regard for ourselves, others, and the resources entrusted to us (including people, capital, and the natural environment).
- Aspirational Standards: Demonstrating active listening during elicitation workshops; respecting diverse cultural norms and viewpoints; negotiating in good faith without deceitful leverage.
- Mandatory Standards:
- Refraining from harassment, bullying, discrimination, or abusive conduct.
- Never using one's professional position or authority to influence others for personal gain.
- Respecting the property and intellectual property rights of others (refusing to use pirated software or plagiarized requirements templates).
Pillar 3: Fairness
- Core Definition: The duty to make decisions and act impartially, objectively, and free from self-interest, favoritism, prejudice, and nepotism.
- Aspirational Standards: Demonstrating transparency in decision-making; providing equal access to information; continuously examining oneself for subconscious bias during requirements prioritization.
- Mandatory Standards:
- Full, Prompt Disclosure of Conflicts of Interest: Proactively disclosing any real or perceived conflict of interest to stakeholders (e.g., if a BA owns stock in an RFP vendor, they must disclose it immediately).
- Mandatory Recusal: Completely recusing oneself from participating in decisions or evaluations where an unresolvable conflict of interest exists.
- Impartial vendor evaluation: Evaluating commercial off-the-shelf (COTS) software strictly against objective, baselined evaluation criteria without favoritism.
Pillar 4: Honesty
- Core Definition: The duty to understand the truth and act in a truthful manner both in our communications and in our conduct.
- Aspirational Standards: Cultivating an environment where bad news can be communicated without fear; providing accurate, transparent context rather than half-truths.
- Mandatory Standards:
- Never engaging in or condoning behavior designed to deceive, mislead, or distort facts.
- Providing accurate, honest estimates of costs, timelines, requirements complexity, and feasibility.
- Never suppressing, altering, or falsifying test results, defect counts, or compliance audit evidence.
- Truthfulness in professional credentials: Never misrepresenting one's experience, certifications, or educational degrees to clients or employers.
Resolving Realistic Ethical Dilemmas in Business Analysis
On the PMI-PBA examination, questions rarely ask candidates to define "Honesty" or "Fairness" in the abstract. Instead, questions place the candidate in high-stakes operational scenarios containing competing pressures:
+===================================================================================================+
| REAL-WORLD BUSINESS ANALYSIS ETHICAL DILEMMAS |
+===================================================================================================+
| |
| DILEMMA 1: Executive Pressure to Inflate the Business Case |
| • Scenario: Sponsor instructs the BA to reduce projected 5-year operating costs by 40% and |
| double revenue growth projections so the capital committee will approve the project charter. |
| • Ethical Mandate (Honesty & Responsibility): The BA must refuse to fabricate or manipulate |
| financial estimates. The BA presents unvarnished, empirical valuation ranges and documents |
| the true risks, maintaining that honesty takes precedence over project approval. |
| |
| DILEMMA 2: Suppressing Test Defect Evidence to Hit a Launch Bonus |
| • Scenario: The project manager demands that the BA reclassify three Severity-2 security bugs |
| as "cosmetic enhancements" so the project passes the launch gate and earns a team bonus. |
| • Ethical Mandate (Honesty & Responsibility): The BA must refuse to alter the defect logs. |
| Falsifying test evidence violates mandatory honesty standards and exposes the organization |
| and consumers to catastrophic cybersecurity breaches. The BA reports accurate test evidence. |
| |
| DILEMMA 3: Conflict of Interest in COTS Vendor Selection |
| • Scenario: The lead BA's spouse is a senior equity partner at one of the software vendors |
| submitting a proposal for an enterprise ERP replacement. |
| • Ethical Mandate (Fairness): The BA must formally disclose the familial relationship in writing|
| to the project steering committee immediately and recuse themselves completely from the RFP |
| scoring, vendor evaluation, and selection deliberations. |
| |
| DILEMMA 4: Discovering Regulatory Non-Compliance & Customer Privacy Violations |
| • Scenario: During interface analysis of a customer intake portal, the BA discovers that the |
| engineering team is unencrypting and caching unmasked credit card CVVs and SSNs in log files. |
| • Ethical Mandate (Responsibility & Law): The BA must report the non-compliance immediately to |
| corporate infosec, data privacy officers, and executive leadership, refusing to remain silent |
| or treat statutory violations (PCI-DSS/GDPR) as benign technical quirks. |
+===================================================================================================+
The Continuing Certification Requirements (CCR) Program
Earning the PMI-PBA credential proves initial competence, but business analysis is an evolving profession. To ensure practitioners maintain currency in agile practices, enterprise architecture, artificial intelligence, and strategic business valuation, PMI mandates participation in the Continuing Certification Requirements (CCR) program.
The 3-Year Certification Cycle
- Cycle Duration: Exactly 3 years, beginning on the day the candidate passes the PMI-PBA examination.
- PDU Mandate: Credential holders must earn and report exactly 60 Professional Development Units (PDUs) within each 3-year cycle.
- The PDU Metric: One PDU represents one hour (60 minutes) of spent learning, teaching, or giving back to the profession.
The PMI Talent Triangle
PMI structures the CCR framework around the PMI Talent Triangle, reflecting the multi-faceted competencies modern organizations demand from business analysts and project leaders:
THE PMI TALENT TRIANGLE
[ WAYS OF WORKING ]
(Formerly Technical Mastery)
• Agile, Scrum, Kanban, SAFe
• Predictive & Hybrid lifecycles
• Requirements modeling & RTM
• Elicitation & Prototyping
• Data analytics & Testing
▲
/ \
/ \
/ \
/ \
/ \
/ \
/ \
▼ ▼
[ POWER SKILLS ] [ BUSINESS ACUMEN ]
(Formerly Leadership) (Formerly Strategic Mgmt)
• Collaborative leadership • Industry domain knowledge
• Active listening & empathy • Financial valuation (ROI, NPV)
• Negotiation & consensus • Strategic business cases
• Conflict resolution • Regulatory compliance & law
• Emotional intelligence • Competitive market analysis
Strict PDU Category Distribution Rules
The 60 PDUs must be earned across two overarching categories—Education and Giving Back—governed by non-negotiable minimums and caps:
- Education Category (Minimum 35 PDUs Required):
- Ways of Working: Minimum 8 PDUs.
- Power Skills: Minimum 8 PDUs.
- Business Acumen: Minimum 8 PDUs.
- Remaining Education PDUs: The remaining 11 Education PDUs (to reach the 35 PDU minimum) can be earned across any of the three Talent Triangle arms.
- Exam Rule: There is no maximum limit on Education PDUs. A practitioner can earn all 60 PDUs entirely in Education.
- Giving Back to the Profession Category (Maximum 25 PDUs Permitted):
- Giving Back activities are optional, but if reported, they are strictly capped at a maximum of 25 PDUs per 3-year cycle.
- Working as a Professional: Practitioners working daily in business analysis roles can claim a maximum of 8 PDUs per 3-year cycle.
- Other Giving Back Activities: Authoring business analysis articles/books, delivering webinars, presenting at PMI chapter meetings, mentoring junior analysts, or volunteering on non-profit initiatives make up the remaining permitted Giving Back PDUs.
CCR Reporting, Audits, and Credential Governance
- Reporting System: Practitioners log PDUs through the online Continuing Certification Requirements System (CCRS).
- Random Audits: PMI conducts random compliance audits. If selected, the practitioner must furnish empirical documentation verifying the claimed activity (e.g., course completion certificates, conference agendas, published articles, employer verification letters for professional practice).
- Suspension and Revocation: If a credential holder fails to accumulate 60 valid PDUs by their cycle expiration date, the credential enters a one-year suspension status. During suspension, the individual cannot refer to themselves as a PMI-PBA. If the deficiency is not cured within the one-year grace period, the credential is permanently revoked, requiring the individual to re-apply and re-sit for the 200-question exam.
PMI Code of Ethics Pillars & Exam Scenarios Table
The following reference table analyzes the four ethical pillars, contrasting aspirational ideals against mandatory standards, and detailing the exact ethical actions required on the PMI-PBA exam:
| Ethical Pillar | Aspirational Standard (Strive to Achieve) | Mandatory Standard (Enforceable Rule) | Realistic BA Workplace Dilemma Scenario | Mandatory Ethical Action Required |
|---|---|---|---|---|
| Responsibility | Base professional decisions on the health, safety, and welfare of the public and environmental sustainability. | Comply with all laws and regulations; proactively report illegal or unethical violations to appropriate corporate authorities. | Project manager instructs BA to omit statutory GDPR customer consent checkboxes to increase marketing lead conversions. | Refuse: Explain that complying with statutory privacy laws is mandatory; escalate to Corporate Privacy / Legal if PM persists. |
| Respect | Engage in active listening during workshops; respect diverse viewpoints; negotiate in good faith without deceit. | Never engage in abusive behavior, bullying, harassment, or personal attacks; respect the intellectual property of others. | Executive stakeholder aggressively berates and insults a junior business analyst in front of a 30-person elicitation session. | Intervene: Maintain professional decorum; address the behavior respectfully; document and escalate workplace harassment to HR. |
| Fairness | Ensure transparent decision-making; provide equal access to project data; eliminate subconscious bias. | Proactively disclose all real or perceived conflicts of interest; recuse oneself from decisions where bias exists. | Lead BA owns 5,000 shares of stock in a specialized commercial COTS vendor submitting a proposal for the project RFP. | Disclose & Recuse: Formally disclose financial stock ownership in writing to leadership; completely recuse oneself from evaluation. |
| Honesty | Foster an environment where bad news can be shared safely; provide transparent context rather than half-truths. | Never deceive, mislead, or distort facts; provide accurate estimates; never falsify test results or project status. | Executive sponsor pressures BA to mask three critical UAT defect failures to guarantee project passes the release gate. | Refuse to Alter: Document unvarnished test results accurately in the RTM; present the empirical data truthfully to decision-makers. |
PMI Talent Triangle & CCR PDU Requirements Table
The following reference table details the PMI Talent Triangle competencies, PDU allocation formulas, and approved educational and giving-back activities for certified PMI-PBA practitioners:
| Talent Triangle Arm / Category | Core Competency & Topic Coverage | Minimum / Maximum PDU Rule | Approved PDU Earning Activities |
|---|---|---|---|
| Ways of Working | Requirements elicitation, BPMN modeling, user stories, Gherkin BDD, RTM traceability, test validation, agile/Scrum/SAFe, hybrid lifecycles. | Minimum 8 PDUs per 3-year cycle (No maximum limit) | Completing PMI courses, attending agile/BA conferences, earning agile certifications, reading technical BA textbooks. |
| Power Skills | Interpersonal leadership, collaborative negotiation, active listening, stakeholder conflict resolution, emotional intelligence, coaching. | Minimum 8 PDUs per 3-year cycle (No maximum limit) | Attending leadership seminars, communications workshops, executive negotiation bootcamps, conflict management training. |
| Business Acumen | Financial valuation (ROI, NPV, IRR), business case development, enterprise architecture, regulatory compliance (HIPAA, GDPR), market analysis. | Minimum 8 PDUs per 3-year cycle (No maximum limit) | Enrolling in financial modeling courses, industry-specific compliance webinars, MBA coursework, strategic planning seminars. |
| Flexible Education Pool | Any additional coursework or learning across Ways of Working, Power Skills, or Business Acumen. | Minimum 11 PDUs (Completes the 35 Education PDU minimum) | Formal academic training, online self-paced courses (e.g., PMI SeminarsWorld, Coursera, LinkedIn Learning), chapter dinner keynotes. |
| Working as a Professional | Applying professional business analysis skills in one's day-to-day corporate employment role. | Maximum 8 PDUs per 3-year cycle (Optional category) | Self-reporting active employment as a Business Analyst, Systems Analyst, Product Owner, or Requirements Engineer (requires employer verification). |
| Giving Back to the Profession | Volunteering with PMI chapters, authoring articles, presenting webinars, mentoring junior analysts, creating open knowledge. | Maximum 17 PDUs (Combined with professional work, max 25 PDUs) | Presenting at a PMI Chapter event, writing a business analysis whitepaper, mentoring an aspiring PMI-PBA candidate, serving on a PMI board. |
A business analyst on an enterprise payment gateway modernization project is pressured by the project sponsor to alter the final User Acceptance Testing (UAT) report. Specifically, the sponsor demands that the analyst remove documentation of three open Severity-2 security defects related to unencrypted payment card authorization tokens, arguing that the client contract mandates delivery by Friday to unlock a $500,000 corporate performance bonus. The sponsor promises that an emergency engineering patch will deploy quietly two weeks post-launch. What is the business analyst's mandatory ethical duty under the PMI Code of Ethics?
An enterprise utility company issues a competitive Request for Proposal (RFP) to procure a new $4,000,000 enterprise asset management platform. The lead business analyst assigned to chair the vendor evaluation committee realizes that their sister is the vice president of enterprise sales at one of the four software vendors submitting a formal bid. What mandatory action must the business analyst take according to the PMI Code of Ethics?
A certified PMI-PBA practitioner is approaching the conclusion of their three-year Continuing Certification Requirements (CCR) cycle. Reviewing their CCRS transcript, the practitioner notes that they have logged: 14 PDUs in Ways of Working, 6 PDUs in Power Skills, 12 PDUs in Business Acumen, 8 PDUs for Working as a Professional, and 12 PDUs for volunteering at their local PMI chapter (totaling 52 PDUs). What specific PDU requirements must this practitioner satisfy before the three-year cycle deadline to maintain their PMI-PBA credential?
You've completed this section
Continue exploring other exams