CISSP Security and Risk Management Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Provide diligent and competent service to principals

  Why it's wrong here

  This canon, while crucial for professional conduct, is the third in the (ISC)² Code of Ethics hierarchy, meaning it does not take precedence over the first two. It mandates that CISSPs perform their duties with the highest level of professional care and skill for their employers, clients, or other stakeholders. However, this obligation is subordinate to protecting society and acting honorably, especially when conflicts of interest or duty arise.

• ✗

  Act honorably, honestly, justly, responsibly, and legally

  Why it's wrong here

  This canon represents the second-highest priority within the (ISC)² Code of Ethics, establishing the foundational ethical conduct expected of all certified professionals. It requires adherence to legal statutes and ethical principles in all professional activities, ensuring integrity and trustworthiness. While fundamental to a CISSP's professional life, this canon is superseded by the paramount duty to protect society, the common good, and the infrastructure.

• ✓

  Protect society, the common good, and the infrastructure

  Why this is correct

  This is the correct answer because it represents the first and highest priority canon in the (ISC)² Code of Ethics. It mandates that certified professionals prioritize the safety, welfare, and security of the public, critical systems, and shared resources above all other considerations. This overarching responsibility ensures that individual or organizational interests never compromise the broader societal well-being or the integrity of essential information technology infrastructure.

• ✗

  Advance and protect the profession

  Why it's wrong here

  This canon is the fourth and lowest in the hierarchical structure of the (ISC)² Code of Ethics, meaning it does not take precedence over the other three. It obligates CISSPs to uphold the reputation of the information security profession, contribute to its knowledge base, and mentor future professionals. While important for the long-term viability and respect of the field, this duty is subordinate to all other canons, particularly the direct protection of society.

Go deeper

Related to this question