CISSP Practice Question (Domain 1: Security and Risk Management)

A security consultant discovers her client is knowingly misrepresenting remediation status to its customers after an assessment she performed. The client cites confidentiality clauses in her contract and directs her to stay silent. Under the ISC2 Code of Ethics, what is her PRIMARY obligation?

A. Honor the confidentiality agreement with the client

B. Act honorably and protect the public trust

C. Report the misrepresentation to affected customers

D. Withdraw from the engagement and document concerns

(Explain your answer for more points in the comments!)

Come back for the answer tomorrow, or study more now!

20 comments

CISSP Practice Question (Domain 1: Security and Risk Management)