(5)The risk of error or manipulation is arguably greatest in cases where contributors can exercise discretion in the contribution of input data. The code of conduct should therefore require contributors to establish policies that specify when, how and by whom discretion may be exercised.