Which of the following is from the Internet Architecture Board (IAB) Ethics and the Internet (RFC 1087)?
Correct Answer: A
The IAB strongly endorses the view of the Division Advisory Panel of the National Science Foundation Division of Network, Communications Research and Infrastructure which, in paraphrase, characterized as unethical and unacceptable any activity which purposely:
(a)
seeks to gain unauthorized access to the resources of the Internet,
(b)
disrupts the intended use of the Internet,
(c)
wastes resources (people, capacity, computer) through such actions,
(d)
destroys the integrity of computer-based information, and/or
(e)
compromises the privacy of users.
The Internet exists in the general research milieu. Portions of it continue to be used to support
research and experimentation on networking. Because experimentation on the Internet has the
potential to affect all of its components and users, researchers have the responsibility to exercise
great caution in the conduct of their work.
Negligence in the conduct of Internet-wide experiments is both irresponsible and unacceptable.
The IAB plans to take whatever actions it can, in concert with Federal agencies and other
interested parties, to identify and to set up technical and procedural mechanisms to make the
Internet more resistant to disruption.
In the final analysis, the health and well-being of the Internet is the responsibility of its users who
must, uniformly, guard against abuses which disrupt the system and threaten its long-term
viability.
NOTE FROM CLEMENT:
For the purpose of the exam, ensure you are very familiar with the ISC2 code of ethics. There will
be a few questions on the exam related to it and you must also sign and agree to the code in order
to take the exam. The code of ethics consist of 4 high level cannons. Do ensure you know the
order of the 4 cannons, the first one listed it the most important.
See an extract of the code below:
Code
All information systems security professionals who are certified by (Isc)2 recognize that such
certification is a privilege that must be both earned and maintained. In support of this principle, all
(Isc)2 members are required to commit to fully support this Code of Ethics (the "Code"). (Isc)2
members who intentionally or knowingly violate any provision of the Code will be subject to action
by a peer review panel, which may result in the revocation of certification. (Isc)2 members are
obligated to follow the ethics complaint procedure upon observing any action by an (ISC)2
member that breach the Code. Failure to do so may be considered a breach of the Code pursuant
to Canon IV.
There are only four mandatory canons in the Code. By necessity, such high-level guidance is not
intended to be a substitute for the ethical judgment of the professional.
Code of Ethics Preamble:
The safety and welfare of society and the common good, duty to our principals, and to each other,
requires that we adhere, and be seen to adhere, to the highest ethical standards of behavior.
Therefore, strict adherence to this Code is a condition of certification.
Code of Ethics Canons:
Protect society, the common good, necessary public trust and confidence, and the infrastructure.
Act honorably, honestly, justly, responsibly, and legally.
Provide diligent and competent service to principals.
Advance and protect the profession.
The following are incorrect answers:
-Users should execute responsibilities in a manner consistent with the highest standards of their profession is incorrect because it is from the (ISC)2 code of ethics.
-
There must not be personal data record-keeping systems whose very existence is secret is incorrect because if is from the U.S. Department of Health, Education, and Welfare Code of Fair Information Practices.
-
There must be a way for a person to prevent information about them, which was obtained for one purpose, from being used or made available for another purpose without their consent is incorrect because if is from the U.S. Department of Health, Education, and Welfare Code of Fair Information Practices.
Reference(s) used for this question:
https://www.isc2.org/uploadedFiles/%28ISC%292_Public_Content/Code_of_ethics/ISC2-Code-of-Ethics.pdf and http://tools.ietf.org/html/rfc1087 and http://simson.net/ref/2004/csg357/handouts/01_fips.pdf
