- [Narrator] Information security professionals
are also bound by the code of professional ethics
to act honorably and responsibly.
Many organizations have internal codes of ethics
that their employees must follow.
For example, here is the code of ethics for AT&T.
It includes rules and guidelines for how
employees should conduct themselves honestly
and ethically,
and also how they should avoid
personal conflicts of interest.
ISC Squared also has a code of ethics that applies to
all certified security professionals.
This code of ethics has a
preamble with two statements in it.
These are the safety and welfare of society
and the common good,
duty to our principles and to each other,
requires that we adhere and be seen to
adhere to the highest standards of ethical behavior.
Therefore, strict adherence to this
code is a condition of certification.
And then there are four canons to the code of ethics.
Compliance with these canons is mandatory for all
members of ISC Squared.
First, ISC Squared members must protect society,
the common good,
necessary public trust and confidence,
and the infrastructure.
Second, ISC Squared members must act honorably,
honestly, justly,
responsibly, and legally.
Third, they must provide diligent and confident
service to principles,
and finally, ISC Squared members promise to
advance and protect the profession.
Violations of the code of ethics are grounds for the
revocation of an individuals certification.
Members of ISC Squared who become aware of an ethics
breach by any other member are required to report
that breach to the organization for investigation.