CISSP Security and Risk Management Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Advance the profession

  Why it's wrong here

  The canon to "Advance the profession" is indeed the fourth and lowest priority among the (ISC)² Code of Ethics canons. This principle mandates that certified professionals contribute to the collective body of cybersecurity knowledge, mentor aspiring practitioners, and uphold the integrity and reputation of the profession. While crucial for long-term growth and credibility, its importance is secondary to the immediate protection of society, honorable conduct, and diligent service to employers and clients.

• ✗

  Provide diligent service

  Why it's wrong here

  The canon to "Provide diligent service to principals" is the third in the hierarchy of the (ISC)² Code of Ethics. This principle requires professionals to exercise due care, competence, and diligence in fulfilling their responsibilities to employers and clients. It encompasses maintaining technical proficiency, adhering to contractual obligations, and acting in the best interest of those they serve, but these duties are ethically subordinate to the paramount responsibility of protecting society and acting honorably.

• ✗

  Act honorably

  Why it's wrong here

  The canon to "Act honorably, honestly, justly, responsibly, and legally" holds the second position in the (ISC)² Code of Ethics hierarchy. This principle establishes a foundational standard for personal and professional conduct, emphasizing integrity, fairness, and adherence to laws and regulations. It requires respecting privacy, intellectual property, and avoiding conflicts of interest, forming a critical ethical baseline that, while fundamental, is still prioritized below the ultimate obligation to protect society.

• ✓

  Protect society

  Why this is correct

  The canon to "Protect society, the common good, necessary public trust and confidence, and the infrastructure" is unequivocally the first and highest priority within the (ISC)² Code of Ethics. This principle mandates that all cybersecurity professionals prioritize the safety, welfare, and security of the public above all other considerations. It encompasses safeguarding critical infrastructure, protecting sensitive data, and ensuring the reliability of information systems, establishing a clear ethical imperative that supersedes individual, organizational, or professional interests.

Go deeper

Related to this question