CISSP Practice Question: A CISSP discovers that their employer's product has a critical vulnerability. The…

Correct Answer: A. Protect society, the common good, and the infrastructure

Explanation (CISSP Manager Logic):

The ISC2 Code of Ethics establishes a strict hierarchy of duties. The first and most important canon is to "Protect society, the common good, necessary public trust and confidence, and the infrastructure." When an employer's actions (or lack thereof) pose a risk to the public or infrastructure, this duty overrides the obligation to the employer.

By prioritizing this canon, you:

• Uphold the highest ethical standard of the certification
• Prevent potential widespread harm to the public and critical systems
• Ensure that professional integrity is not compromised by corporate negligence

While the other options are relevant, they fall short because:

• B: While important, acting honorably is the second canon and is subordinate to protecting society.
• C: Providing diligent service to the employer is the third canon and cannot be used to justify ignoring a risk to the public.
• D: Protecting the profession is the fourth canon and is the lowest priority in the hierarchy of ethical duties.

Think like a manager:

Always follow the hierarchy of the ISC2 canons. Public safety and the stability of the infrastructure are the foundation of all cybersecurity professional responsibilities.