ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

Disabling encryption would lower the confidentiality of customer PII and jeopardize the public's trust in the organization's services. The first (ISC)² Code of Ethics canon requires members to protect society, the commonwealth, and the infrastructure; the second demands they act legally and responsibly. Simply obeying, even with logging, still violates these canons, while enabling extra monitoring after removing encryption does not mitigate the fundamental risk. The most ethical course is to refuse the insecure request and offer an alternative that preserves encryption yet meets business objectives, such as using temporary performance tuning or parallel encrypted buckets.