Pass your certification exam. Faster. Guaranteed.

Ethics Transcription

Welcome to our information security legal issues module on professional ethics. It is very important that you are familiar with the ISE squared code of ethics canon's. This is the primary canon covered on the CISP exam, and CISSP candidates are required to abide by these rules. The Internet Activities Board or IAB is a committee for designing, engineering and managing the Internet.

The board believes that there should not be violations of the nature of the internet. Such as individuals attacking the confidentiality, integrity and availability of other persons' data. And the generally accepted information security principles from 2003 are designed to support the mission of your organization using sound management, and sound judgement.

The ISC squared code of ethics requires that the computer security professional first protects society. Their nation and the infrastructure, then act honorably, honestly, justly, responsibly and legally. Then provide diligent and competent service to their principals, whether that's an employer or a client. And finally advance and protect the computer security profession.

It is important to remember for the CISSP examination that this is the order of importance, and if you have any type of conflict, this would be the order that you would follow. For example, you would protect your society, or your country before providing diligent service to your employers.

There is a difference between unethical behavior and illegal behavior. If you violate a law, that would be illegal behavior. Laws are rules or regulations that are created by governmental agencies that either prohibit certain conduct, or require certain behavior in a society. Ethics are rules or socially accepted behavior that is defined generally by your peers rather than the government.

Policies are created by employers and are rules that employees are required to follow in the workplace. Laws are enforced by the government. For example, if you break a criminal law, you will be arrested by the police. Ethics and policies are not enforced by the government. They are not laws.

There are some actions that may be a violation of your policy, and may be unethical, but they are not necessarily illegal. For example, interrupting another person's internet activities, negligence while using a computer, or supporting a computer, using internet resources, and computers that do not belong to you. Or lying and making promises that you have no intention of keeping.

This concludes our information's security legal issues module. Thank you for watching.