ISC2 CISSP Practice Question
A security professional discovers that another member of their security team is using company resources to run a personal side business during work hours. According to the ISC2 Code of Ethics, what is the BEST course of action for the security professional to take?
Report the activity through appropriate channels within the organization
Ignore the situation as it does not involve information security
Confront the colleague directly and demand they stop the unauthorized activity
Report the activity directly to external authorities