Exam CISSP topic 1 question 422 discussion

Avoid conflicts of interest

Sybex 9th edition, page 931. Canon III, "We must ensure that we are in a position to provide unbiased, competent service to our organization."

By engaging in employment with a competitor without proper disclosure and consent, the ISSO fails to act honorably and responsibly, violating Canon C of the (ISC)² Code of Professional Ethics. Security professionals are expected to uphold the highest standards of integrity to maintain trust and protect the interests of their employers and clients.

B. This canon requires professionals to serve their employers or clients with competence and diligence. While freelancing for a competitor may violate this principle, the core issue in this scenario is the ethical breach related to integrity and honesty. C. This canon emphasizes the importance of integrity and ethical behavior in all professional actions. By working for a competitor while employed by another organization, the ISSO could be engaging in a conflict of interest, which may lead to the misuse or sharing of proprietary or confidential information. This behavior undermines trust and can damage the reputation of the profession, violating the requirement to act honorably, responsibly, and legally. In the 4 cannons, act honorably comes in #2 before service to principals #3. Diligent and competent service has nothing to do with conflict of interest. You can be a double agent providing high quality services on both sides.

B. "Under the third canon, “Provide diligent and competent service to principals,” they offer this guidance: Preserve the value of their systems, applications and information. Respect their trust and the privileges that they grant you. Avoid conflicts of interest or the appearance thereof." https://resources.infosecinstitute.com/certification/the-isc2-code-of-ethics-a-binding-requirement-for-certification/

B is correct, page 931 in 9th edition CISSP study guide

Answer is correct - Act honorably, honestly, justly, responsibly, and legally. This canon requires (ISC)2 members to avoid conflicts of interest, respect the intellectual property rights of others, and disclose any unethical or illegal activities. An Information System Security Officer (ISSO) employed by a large corporation, while also freelancing in a similar role for a competitor, violates this canon by engaging in a conflict of interest and potentially compromising the confidentiality and integrity of the information systems of both organizations.