Security Basics mailing list archives

RE: (ISC)2 Code of Ethics Query


From: "David Gillett" <gillettdavid () fhda edu>
Date: Tue, 4 Apr 2006 15:11:37 -0700

  I believe that exact question was on the exam when I wrote,
and passed, it.  I have to assume that my answer was acceptable;
I don't recall any specific resources that I used to study for
it.
  On the other hand, I believe the "Ethics and Law" domain was
to be restructured as of January of this year, so it's entirely
possible that the resources I used for anything in that domain
are now out of date.

  For the record, what I used were:

- two of the large books on preparing for the exam

- a set of 8 weekly sessions presented by members of the local
  ISSA chapter

- a 12-week course in digital forensics

- practice questions and study articles from cccure.org

- and, of course, more than meeting the practical experience
  requirement....

David Gillett
CISSP CCNP CCSE MCSE


-----Original Message-----
From: Isaac Prince Jeffrey [mailto:jeffrey.mech () gmail com] 
Sent: Tuesday, April 04, 2006 12:13 AM
To: security-basics () securityfocus com
Subject: (ISC)2 Code of Ethics Query

Hi Brothers-at-arms,
               I am preparing fo rthe CISSP exam and I just 
need to know the view of ethics that ISC proposes. Like what 
is ethically neutral,wrong or right in
ISC2 point of view. I am puzzled on this one. Do u have any 
resources that contain these info?

For example lets take this question:
A professor came to a college for a short stint and during 
his visit discovered a lot of vulnerabilities in their 
network. He compiled all the vulnerabilities and just before 
leaving he gives it to one of his colleagues for correcting it.

Answers provided:
1. Ethically wrong as he shud hav intimated at the time of 
discovery of vulnerability itself 2. Ethically right as he 
handed it over without causing any harm 3. Ethically neutral 
as he compiled all vulnerabilities and intimated befor leaving.

I need to know if any material on the net is available for 
understanding this (ISC)2 version of computer ethics.

Kindly stick to (ISC)2 view of computer ethics as I dont want 
deviations with everyones point of view and opinion on ethics.

Thanks in advance for all friends who take their time out to 
reply with coherent nformation.
--
With Warm Regards,
Isaac Prince Jeffrey.D, BE|CCNP|MCSE:Security Security 
Engineer,Paladion Networks, Bangalore,India
GSM: +919886789611
http://www.paladion.net
"A Problem is like a tree u see from a moving train; As u 
approach,it seems big but as you pass the tree it becomes smaller"



---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: