6.2 Understand, Adhere to, and Promote Professional Ethics ISSMP Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is an effective way to promote adherence to both the ISC2 and organizational codes of ethics among stakeholders?

   • APost the codes on the company website and assume everyone reads them.
   • BMake adherence voluntary to respect individual autonomy.
   • CLimit ethics training to senior management only.
   • DIntegrate ethics training into onboarding and ongoing professional development.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A multinational retail company is revising its organizational code of ethics. The company operates in countries with widely varying laws on data privacy and employee monitoring. The legal team wants the code to be legally compliant everywhere, while the security team wants the code to be strict enough to protect customer data. The CEO wants a single, unified code. What is the most effective approach?

   • ACreate a global code with core principles and allow regional appendices to address local legal requirements.
   • BWrite a separate code of ethics for each country to ensure full legal compliance.
   • CAdopt the strictest legal standard from any country and apply it globally.
   • DBase the code solely on the company's headquarters country laws to simplify compliance.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   An ISC2-certified professional is asked by their manager to implement a security control that they believe is ineffective and could give a false sense of security to customers. Applying the ISC2 Code of Ethics, what should the professional do?

   • AImplement the control but document that it is ineffective.
   • BDiscuss the concerns with the manager and propose a more effective alternative.
   • CImplement the control as requested because the manager has authority.
   • DRefuse to implement the control and threaten to resign.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A healthcare organization is developing a code of ethics for its IT staff who handle patient records. The organization wants to ensure that the code is not just a formality but is actively used in decision-making. Which element is most critical to embed in the code to achieve this?

   • AA requirement that all staff sign the code annually and attend a one-hour refresher.
   • BA list of specific technical controls that must be implemented for all systems.
   • CA clear statement of core values and practical examples of ethical dilemmas staff may face.
   • DA detailed description of the disciplinary process for code violations.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which strategy is most effective for promoting adherence to professional ethics among peers?

   • ALeading by example and discussing ethical dilemmas openly.
   • BKeeping the code of ethics confidential to maintain trust.
   • CRelying on external audits to enforce ethics.
   • DAvoiding discussions about ethics to prevent conflict.
   Reveal Solution Discussion Select an answer first