ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

The Code of Ethics mandates protecting society and the public, acting honorably, honestly, justly, responsibly, and legally, and providing diligent service to principals. Sharing customer data without written consent would violate contractual and legal obligations and jeopardize confidentiality, so the request must be refused. The incident should be promptly reported or escalated through the organization's compliance or management channels. Encrypting, partially anonymizing, or sharing to a personal account still constitutes unauthorized disclosure and does not satisfy the canons.