While you were gathering information as part of security assessments for one of your clients, you were able to gather data that show your client is involved with fraudulent activities. What should you

Question

Options

• AImmediately stop work and contact the proper legal authorities
• BIgnore the data and continue the assessment until completed as agreed
• CConfront the client in a respectful manner and ask her about the data
• DCopy the data to removable media and keep it in case you need it

• A
  74% (26)
• B
  3% (1)
• C
  14% (5)
• D
  9% (3)

Explanation

When a security professional discovers evidence of criminal activity - even from the client who hired them - the ethical and legal obligation is to immediately cease work and report to the appropriate legal authorities. Continuing the assessment (B) could make you complicit or obstruct justice. Confronting the client (C) could give them the opportunity to destroy evidence or take retaliatory action. Copying data to removable media (D) without proper legal authorization could expose you to criminal liability and compromise the evidentiary chain of custody. Stopping and reporting protects you legally, preserves the integrity of any investigation, and fulfills the ethical duty that overrides the contractual engagement.

No community discussion yet for this question.