A county CISO is pressured by a council member to hide a ransomware disclosure from the public dashboard while still telling staff that the office follows ISC2 ethics. Which action best aligns with the ISC2 Code of Professional Ethics?
Select an answer to reveal the explanation.
Short Explanation
Ethics here is like a hard hat on a construction site — it stays on even when someone important says it ruins the photo. Hiding a real ransomware event to please a council member breaks the duty to protect society and to act honorably. The clean move is honest disclosure, not creative silence.
Full Explanation
The ISC2 Code of Professional Ethics requires practitioners to protect society, the common good, necessary public trust and confidence, and the infrastructure; to act honorably, honestly, justly, responsibly, and legally; to provide diligent and competent service; and to advance and protect the profession. Political pressure to suppress a ransomware disclosure conflicts with those canons. Selecting transparent, required disclosure over concealment demonstrates that professional duty outweighs convenience for a preferred official narrative.