6.2 Understand, Adhere to, and Promote Professional Ethics ISSMP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Why is it important for an organization to have a code of ethics?

   • AIt helps build trust with stakeholders and sets expectations for employee conduct.
   • BIt guarantees that employees will always make ethical decisions.
   • CIt eliminates the need for external audits.
   • DIt is required by law for all companies.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security manager is implementing a new code of ethics in a global company with offices in regions that have very different attitudes toward gift-giving and hospitality. The code currently prohibits accepting any gifts from vendors. Regional managers report that this rule is causing friction and is seen as culturally insensitive. What is the most effective way to handle this situation?

   • ARemove the gift policy from the code entirely and rely on regional managers to set their own rules.
   • BRevise the code to define acceptable gift thresholds and require disclosure of any gifts received.
   • CMaintain the absolute prohibition and discipline any regional manager who questions it.
   • DAllow each region to interpret the code as they see fit without central oversight.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary purpose of the ISC2 Code of Ethics?

   • ATo define the legal penalties for cybercrime.
   • BTo establish technical standards for information security products.
   • CTo provide a legally binding contract between ISC2 and its members.
   • DTo guide members' professional conduct and support public trust in the information security profession.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   How can an organization enforce its code of ethics?

   • ABy making the code optional for employees.
   • BBy establishing clear consequences for violations and a reporting mechanism.
   • CBy relying solely on employees' personal moral values.
   • DBy periodically rewriting the code without employee input.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following is one of the four canons of the ISC2 Code of Ethics?

   • APrioritize the interests of your employer over all other considerations.
   • BMaximize shareholder value while minimizing operational risk.
   • CProtect society, the common good, necessary public trust and confidence, and the infrastructure.
   • DEnsure all information systems are accessible to the public.
   Reveal Solution Discussion Select an answer first