2 cissp ® Official Study Guide Eighth Edition

862
Chapter 19 
■
Investigations and Ethics
(ISC) 
2
Code of Ethics 
The governing body that administers the CISSP certifi cation is the International Information 
Systems Security Certifi cation Consortium, or (ISC) 
2
. The (ISC) 
2
Code of Ethics was devel-
oped to provide the basis for CISSP behavior. It is a simple code with a preamble and four 
canons. The following is a short summary of the major concepts of the Code of Ethics. 
All CISSP candidates should be familiar with the entire (ISC) 
2
Code of 
Ethics because they have to sign an agreement that they will adhere to 
this code. We won’t cover the code in depth, but you can find further 
details about the (ISC) 
2
’s Code of Ethics at
www.isc2.org/ethics
 . You 
need to visit this site and read the entire code.
Code of Ethics Preamble 
The Code of Ethics preamble is as follows: 
■
The safety and welfare of society and the common good, duty to our principals, and to 
each other requires that we adhere, and be seen to adhere, to the highest ethical stan-
dards of behavior. 
■
Therefore, strict adherence to this Code is a condition of certification.
Code of Ethics Canons 
The Code of Ethics includes the following canons: 
Protect society, the common good, necessary public trust and confidence, and the infra-
structure.
Security professionals have great social responsibility. We are charged with the 
burden of ensuring that our actions benefi t the common good. 
Act honorably, honestly, justly, responsibly, and legally.
Integrity is essential to the con-
duct of our duties. We cannot carry out our duties effectively if others within our organiza-
tion, the security community, or the general public have doubts about the accuracy of the 
guidance we provide or the motives behind our actions.