When resolving ethical conflicts, the information security professional MUST consider many factors. In what order should these considerations be prioritized?

The correct priority order per ISC2's Code of Ethics is: (1) public safety/the public good above all, (2) duties to individuals such as clients and users, (3) duties to the profession to maintain its integrity, and (4) duties to principals such as employers. This hierarchy ensures that broad societal harm is prevented first, followed by protecting people directly involved, before obligations to organizations or professional bodies.

This order incorrectly elevates duties to principals (employers/clients) above duties to individuals and the profession, which contradicts the ISC2 Code of Ethics where individual welfare ranks higher than organizational loyalty.

Placing duties to the profession third and duties to individuals last is incorrect; the ISC2 framework prioritizes protecting people (individuals) over maintaining professional standing or organizational obligations.

This ordering incorrectly places duties to principals second and duties to individuals last, reversing the correct ethical hierarchy where protecting individuals takes precedence over serving the interests of employers or clients.