Your company performs penetration tests and security assessments for small and medium-sized business in the local area. During a routine security assessment, you discover information that suggests…

Confronting the client directly about serious criminal activity is dangerous, potentially compromises evidence, and is not the appropriate action for a security professional.

Copying criminal evidence to removable media for personal retention is illegal, could be considered tampering, and would improperly remove evidence from its original context.

Ignoring evidence of human trafficking is not only unethical but also potentially illegal, as it could be seen as complicity or failure to report a felony.

As a security professional, discovering evidence of severe illegal activity like human trafficking during a routine assessment triggers a legal and ethical obligation to stop work immediately. Reporting this to the proper legal authorities is crucial to ensure justice is served and to avoid potential legal complicity.