CISSP - (ISC)2 Code of Ethics

What is the first canon of the (ISC)2 Code of Ethics?

"Protect society, the commonwealth, and the infrastructure."

What does the first canon mean?

Focus of the first canon = the public and their understanding and faith in information systems.

Meaning... Sec Profs. are charged with the promotion of safe security practices and the improvements of the security of systems and infrastructure for the public good.

What does the (ISC)2 Code of Ethics include and which are mandatory?

1) preamble - introduction to the code

2) canons - mandatory to become and remain a CISSP

3) guidance - advisory, to provide supporting info for the canons

What is the second canon of the (ISC)2 Code of Ethics?

"Act honorably, honestly, justly, responsibly, and legally."

What does the second canon mean?

1) When laws from different jurisdictions are found to be in conflict, the 2nd canon suggests that priority is given to the jurisdiction in which the services are being provided.

2) When providing prudent advice, the 2nd canon cautions Sec Profs. against unnecessarily promoting fear, uncertainty, and doubt.

What is the third canon of the (ISC)2 Code of Ethics?

"Provide diligent and competent service to principals."

What does the third canon mean?

Primary focus = to ensure that the Sec Prof. provides competent service for which he/she is qualified and which maintains the value and confidentiality of information and associated systems.

Also, the 3rd canon emphasizes to ensure that the Sec Prof. does not have a conflict of interest in providing quality services.

What is the fourth canon of the (ISC)2 Code of Ethics?

"Advance and protect the profession."

What does the fourth canon mean?

1) requires Sec Profs. to maintain their skills and advance the skills and knowledge of others;

2) requires that individuals protect the integrity of the security profession by avoiding any association with those who might harm the profession

Provide a high-level description of the 4 canons

The (ISC)2 Code of Ethics presents an ordered set of four canons that attend to matters of the public, the individual's behavior, the provision of competent service, and the profession as a whole.