Fill This Form To Receive Instant Help
Homework answers / question archive / Assignment Content The director of IT has indicated that the board of directors is compiling a corporate portfolio on ethics and has asked all departments to contribute information on how a code of ethics impacts daily decisions
(ISC)² Code Of Ethics • • • Ethics Complaint Procedures Ethics Committee Members Report Exam and Test Center Fraud Code All information security professionals who are certified by (ISC)² recognize that such certification is a privilege that must be both earned and maintained. In support of this principle, all (ISC)² members are required to commit to fully support this Code of Ethics (the "Code"). (ISC)² members who intentionally or knowingly violate any provision of the Code will be subject to action by a peer review panel, which may result in the revocation of certification. (ISC)² members are obligated to follow the ethics complaint procedure upon observing any action by an (ISC)² member that breach the Code. Failure to do so may be considered a breach of the Code pursuant to Canon IV. There are only four mandatory canons in the Code. By necessity, such high-level guidance is not intended to be a substitute for the ethical judgment of the professional. Code of Ethics Preamble: • • The safety and welfare of society and the common good, duty to our principals, and to each other, requires that we adhere, and be seen to adhere, to the highest ethical standards of behavior. Therefore, strict adherence to this Code is a condition of certification. Code of Ethics Canons: • • • Protect society, the common good, necessary public trust and confidence, and the infrastructure. Act honorably, honestly, justly, responsibly, and legally. Provide diligent and competent service to principals. • Advance and protect the profession. Ethics Complaint Procedures • Preamble (ISC)² members are professionals and are expected to behave in an ethical manner. They are expected to make difficult ethical decisions and to support one another in doing so. While the board recognizes its obligation to provide the certificate holder with guidance on making ethical decisions, it does not expect to supervise or judge professionals in making these difficult decisions. The board recognizes its responsibility to maintain the integrity of the certification. It accepts that, from time to time, the good of the profession may require it to disassociate the profession from egregious behavior on the part of a particular certificate holder. It intends to deal with necessary complaints in a timely manner. This document describes the procedure to be used when complaints are necessary. By publishing these procedures, the board does not expect, invite, solicit, or encourage such complaints. The use of these procedures is for the sole purpose of protecting the reputation of the profession. They are not intended to be used to coerce or punish certificate holders. • Confidentiality The board and its agents undertake to keep the identity of the complainant and respondent in any complaint confidential from the general public. While disclosure of the identity of the complainant will be avoided where possible, upon filing a complaint, the complainant implies consent to disclose his identity to the respondent, where the board or its agents deem it necessary for due process. Actions of the board may be published at its discretion. Parties are encouraged to maintain confidentiality and certificate holders are reminded of their obligation to protect the profession. • Specificity of Complaints The committee will consider only complaints that specify the canon of our (ISC)² Code of Ethics that has been violated. If you are unsure of the canon violated, file the complaint to the best of your ability or contact the Ethics Committee contact listed at the end of these procedures. • The Ethics Committee The Ethics Committee is established by the Board of Directors to hear all ethics complaints and make recommendations to the board. The committee chairman is selected by the board chairman every year. The members of the committee serve at the convenience and discretion of the committee chairman. The current committee members have been in place for several years and diligently served in their capacity. As complaints and responses are received, the committee reviews both sides and renders a recommendation to the board for a final decision. • Standing of Complainant Complaints will be accepted only from those who claim to be injured by the alleged behavior. While any member of the public may complain about a breach of Canons I or II, only principals (those with an employer/contractor relationship with the certificate holder) may complain about violations of Canons III, and only other professionals (those who are certified or licensed as a professional AND also subscribe to a code of ethics) may complain about violations of Canon IV. • Form of Complaints All complaints must be in writing. The committee is not an investigative body and does not have investigative resources. Only information submitted in writing will be considered. Two copies must be submitted. One in written form and the other in PDF. Complaints must be in the form of a sworn affidavit. The committee will not consider allegations in any other form.. - Download an Ethics Complaint Affidavit Form Complaints should be sufficiently complete to enable the board to reach an appropriate judgment. At a minimum, the affidavit should specify the respondent, the behavior complained of, the canon breached, the standing of the complainant, and any corroborating evidence. Neither the board nor its committee is an investigative body and neither has the authority to compel testimony. We can consider only evidence submitted to us voluntarily. There may be many cases where this evidence is not sufficient to support any action. We can proceed only where a prima facie case is made. Where no such case is made, the committee will close the complaint without prejudice to either party. • Committee Procedures Where a prima facie case has been made, the Ethics Committee will review and tender a recommendation to the board. • Rights of Respondents Respondents to complaints are entitled to timely notification of complaints. It is the intent of the board and its agents to notify the respondent within thirty days from receipt of the complaint. The respondent is entitled to see all complaints, evidence, and other documents. The respondent will have thirty days from accepting and acknowledging delivery to submit information in defense, explanation, rebuttal, extenuation, or mitigation. As with the complaint, in order to be considered this information must be in the form of a sworn affidavit. As in the law, silence implies consent. That is, to the extent that the respondent is silent, the committee may assume that he does not dispute the allegations. The committee may grant necessary extensions of time to the respondent upon request. • Disagreement on the Facts Where there is disagreement between the parties over the facts alleged, the Ethics Committee, at its sole discretion, may invite additional corroboration, exculpation, rebuttals and sur-rebuttals in an attempt to resolve such dispute. The committee is not under any obligation to make a finding where the facts remain in dispute between the parties. Where the committee is not able to reach a conclusion on the facts, the benefit of all doubt goes to the respondent. That is to say, where the respondent disputes the facts alleged, then the burden of proof is on the complainant. • Findings and Recommendations The Ethics Committee will submit findings and recommendations for action to the board. In reaching its findings, the committee will consider any published guidance that has been given to certificate holders. In reaching its recommendations, the committee will prefer the most limited and conservative action consistent with its findings. • Notification and Right of Comment The Ethics Committee will notify the parties of its recommendation prior to any board action. Parties have 14 days submit a response or comments on the recommendations for consideration by the board. • Disciplinary Action Discipline of certificate holders is at the sole discretion of the board. Decisions of the board are final. • Final Disposition Parties will be notified of the final disposition within thirty days of board action. All complaints should comply with the procedure stated and be mailed to the following address: Ethics Complaint (ISC)² Corporate 311 Park Place Blvd., Suite 400 Clearwater FL, 33759 USA Questions should be directed to: legal@isc2.org Ethics Committee Members The Ethics Committee is established by the Board of Directors to hear all ethics complaints and make recommendations to the board. The committee chairman is selected by the board chairman every year. The members of the committee serve at the convenience and discretion of the committee chairman. The current committee members serve diligently in their capacity. As complaints and responses are received, the committee reviews both sides and renders a recommendation to the board for a final decision. • • • • • Yiannis Pavlosoglou, Committee Chair Biljana Cerin, Committee Member Samara Moore, Committee Member Earl Crane, Committee Member Jamal Hartenstein, Committee Member CODE OF ETHICS • Keep private and confidential information gained in your professional work, (in particular as it pertains to client lists and client personal information). Not collect, give, sell, or transfer any personal information (such as name, e-mail address, Social Security number, or other unique identifier) to a third party without client prior consent. • Protect the intellectual property of others by relying on your own innovation and efforts, thus ensuring that all benefits vest with its originator. • Disclose to appropriate persons or authorities potential dangers to any ecommerce clients, the Internet community, or the public, that you reasonably believe to be associated with a particular set or type of electronic transactions or related software or hardware. • Provide service in your areas of competence, being honest and forthright about any limitations of your experience and education. Ensure that you are qualified for any project on which you work or propose to work by an appropriate combination of education, training, and experience. • Never knowingly use software or process that is obtained or retained either illegally or unethically. • Not to engage in deceptive financial practices such as bribery, double billing, or other improper financial practices. • Use the property of a client or employer only in ways properly authorized, and with the owner’s knowledge and consent. • Disclose to all concerned parties those conflicts of interest that cannot reasonably be avoided or escaped. • Ensure good management for any project you lead, including effective procedures for promotion of quality and full disclosure of risk. • Add to the knowledge of the e-commerce profession by constant study, share the lessons of your experience with fellow EC-Council members, and promote public awareness of benefits of electronic commerce. • Conduct oneself in the most ethical and competent manner when soliciting professional service or seeking employment, thus meriting confidence in your knowledge and integrity. • Ensure ethical conduct and professional care at all times on all professional assignments without prejudice. • Not to associate with malicious hackers nor engage in any malicious activities. • Not to purposefully compromise or allow the client organization’s systems to be compromised in the course of your professional dealings. • Ensure all penetration testing activities are authorized and within legal limits. • Not to take part in any black hat activity or be associated with any black hat community that serves to endanger networks. • Not to be part of any underground hacking community for purposes of preaching and expanding black hat activities. • Not to make inappropriate reference to the certification or misleading use of certificates, marks or logos in publications, catalogues, documents or speeches. • Not to be in violation of any law of the land or have any previous conviction.