New rules also require that public companies must adopt and disclose a code of business conduct and ethics for directors, officers, and employees; include its code of business conduct and ethics on its Web site; and each annual report filed with the SEC must state that the code of business conduct and ethics is available on the Web site. The code of conduct must comply with the definition of a “code of ethics” set forth in section 406 of Sarbanes-Oxley and provide for an enforcement mechanism that ensures prompt and consistent enforcement of the code, protection for persons reporting questionable behavior, clear and objective standards for compliance, and a fair process by which to determine violations.