Ethics and security objectives

A security leader first identifies who could be harmed and which duties constrain the decision. The ISC2 Code of Ethics addresses protection of society, public trust and infrastructure; honorable, honest, just, responsible and legal action; diligent and competent service; and advancement of the profession. A manager's instruction is not a sound reason to conceal a suspected incident. Verify the facts, preserve evidence, escalate through the appropriate channels and avoid unnecessary disclosure. Reporting duties and deadlines depend on the applicable jurisdiction and contract; the ethical canons do not establish one universal deadline.

Confidentiality restricts information to authorized recipients. Integrity concerns its required accuracy and completeness. Availability concerns timely access for authorized users. Encrypting a database may improve confidentiality but cannot correct a payment value already altered inside it. A backup may restore availability but cannot, without validation, establish the accuracy of its data. Write a protection objective against a particular asset, threat and consequence: only payroll staff may see salary records; an approved transfer amount must not change; clinicians must reach allergy records during an outage. These statements make failure observable.

Authenticity asks whether a message or actor is from the claimed source. A suitable signature and certificate can help verify an instruction's origin if keys and validation are managed correctly. Nonrepudiation concerns evidence that can attribute an action in its investigative context. A username in an application log is not conclusive when accounts are shared, clocks are wrong or administrators can alter logs. Digital signatures may support authenticity, integrity and nonrepudiation, yet the strength of the conclusion rests on identity, key custody, evidence handling and applicable procedures as well as cryptography.

The priority among objectives changes with the mission. During urgent care, timely access to an allergy record can outweigh waiting for central identity service repair, but that does not justify opening every patient record to everyone. A designed emergency-access path can limit role, time and scope, record a reason and trigger retrospective review. For a nonurgent payroll export, pausing an untrusted transfer while an entitlement is corrected may be the better choice. The professional question is which consequence matters in this setting and who is authorized to accept residual risk.