CERTIFIED-IN-CYBERSECURITY · Question #365
A security analyst discovers a vulnerability in a client's system but decides to withhold the information, fearing negative publicity for the client. Which ISC2 Code of Ethics Canon has the analyst…
The correct answer is A. Provide diligent and competent service to principals. The ISC2 Code of Ethics has four canons. 'Provide diligent and competent service to principals' requires security professionals to fully and faithfully serve their clients (principals) with honesty and thoroughness. By withholding critical vulnerability information from the…
Question
A security analyst discovers a vulnerability in a client's system but decides to withhold the information, fearing negative publicity for the client. Which ISC2 Code of Ethics Canon has the analyst potentially violated?
Options
- AProvide diligent and competent service to principals
- BAct honorably, honestly, justly, responsibly, and legally
- CAdvance and protect the profession
- DProtect society, the common good, necessary public trust and confidence, and the infrastructure
How the community answered
(27 responses)- A89% (24)
- B7% (2)
- D4% (1)
Explanation
The ISC2 Code of Ethics has four canons. 'Provide diligent and competent service to principals' requires security professionals to fully and faithfully serve their clients (principals) with honesty and thoroughness. By withholding critical vulnerability information from the client, the analyst fails this duty of diligence-the client cannot make informed risk decisions without complete information. While other canons (such as acting honestly or protecting the public) may also be implicated, the most direct violation is the failure to provide competent and complete service to the principal (the client).
Topics
Community Discussion
No community discussion yet for this question.