CISSP Question #793: Real Exam Question with Answer & Explanation

Question

An Information System Security Officer (ISSO) employed by a large corporation, while also freelancing in a similar role for a competitor, violates what canon of the (ISC)2 Code of Professional Ethics?

Options

• AAdvance and protect the profession
• BProvide diligent and competent service to principals
• CAct honorably, honestly, justly, responsibly, and legally
• DProtect society, the commonwealth, and the infrastructure

Explanation

Working simultaneously for two competing organizations in the same security role creates a conflict of interest that violates the duty of diligent and competent service to principals under the (ISC)2 Code of Ethics.

Common mistakes.

• A. Canon IV ('Advance and protect the profession') concerns behaviors that reflect on the reputation of the cybersecurity field as a whole, such as discrediting the profession publicly - not conflicts of interest between employers.
• C. Canon II ('Act honorably, honestly, justly, responsibly, and legally') addresses personal integrity and lawful conduct broadly; while dual employment may touch on honesty, the more specific and directly applicable canon is the duty owed to principals.
• D. Canon I ('Protect society, the commonwealth, and the infrastructure') pertains to safeguarding the public and critical infrastructure from harm, which is not the primary issue raised by a conflict of interest between two private employers.

Concept tested. (ISC)2 Code of Ethics conflict of interest canon

Reference. https://www.isc2.org/ethics

No community discussion yet for this question.