Domain 1 of 8 · Chapter 1 of 12

Professional Ethics

Unlock the complete study guide + 1,040 practice questions across 16 full exams.

Bundled into the existing Certified Information Systems Security Professional premium course — no separate purchase.

Included in this chapter:

  • The Code's structure: Preamble plus four Canons
  • The four Canons in priority order
  • Enforcement: complaint standing and the ethics process
  • Organizational codes of ethics vs. the (ISC)² Code
  • Exam-pattern recognition: how ethics questions are framed

The four ISC2 Canons: priority, duty, and complaint standing

CanonCore dutyWhom it protectsWho may file a complaint
Canon 1 (highest)Protect society, the common good, public trust and confidence, and the infrastructureSociety and the publicAny member of the public
Canon 2Act honorably, honestly, justly, responsibly, and legallyThe public / integrity of conductAny member of the public
Canon 3Provide diligent and competent service to principalsEmployers and clients (principals)Only a principal of the member
Canon 4 (lowest)Advance and protect the professionThe profession and its membersOnly another certified or licensed professional

Decision tree

Does it endanger the publicor the infrastructure?YesCanon 1 governsProtect societyNoIs it dishonest, unjust,or illegal?YesCanon 2 governsAct honorably, legallyNoIs it a duty to yourprincipal (employer/client)?YesCanon 3 governsDiligent service to principalsNoDoes it affect theprofession's reputation?YesCanon 4 governsAdvance, protect the professionLower-numbered Canon alwayswins a genuine conflict
Cheat sheet

Cheat sheet

  • Adherence to the ISC2 Code of Ethics is a condition of certification
  • Memorize the four Canons in order: Society, Honor, Principals, Profession
  • When Canons conflict, the lower-numbered Canon wins
  • The published Code lists the Canons in order but does not print a 'precedence' sentence
  • A principal in Canon 3 means an employer or a client
  • Canon 2 forbids dishonesty and illegality regardless of who orders it
  • Accepting work beyond your competence breaches Canon 3
  • The Code expects the highest ethical standard, not merely the legal minimum
  • Even the appearance of impropriety violates the Code
  • An ethics complaint is accepted only from someone claiming injury
  • Complaint standing follows the Canon order: public for 1-2, principals for 3, peers for 4
  • The Ethics Committee reviews; the ISC2 Board holds final disciplinary authority
  • A CISSP is bound by both the ISC2 Code and any organizational code of ethics
  • Company policy can never authorize an act that breaches a Canon
  • On 'what do you do first' ethics items, escalate and document through proper channels
  • CISSP maintenance: Group A vs B CPEs, AMF, and the grace period

Unlock with Premium — includes all practice exams and the complete study guide.

References

  1. ISC2 Code of Professional Ethics