A township contractor asks a security architect to soft-pedal assessment findings so a favorite vendor keeps the renewal. What should the architect do?
Select an answer to reveal the explanation.
Short Explanation
Loyalty to a favorite vendor is not a security control. Soft-pedaling findings is like telling the fire marshal the smoke detector chirp is just 'ambiance.' Accurate reporting protects the township; diluted reports protect someone's renewal, not the public.
Full Explanation
Professional integrity requires that security assessments reflect actual risk, not commercial preferences. Softening findings to favor a vendor violates duties to the organization and to the profession by misrepresenting residual risk to decision makers. Accurate, complete reporting — even when it threatens a renewal — is the ethical requirement; vendor loyalty does not override that duty.