Chapter 16 - Ethics in security consulting

Abstract

This chapter explains the role of ethics in security consulting. The chapter offers guidelines for maintaining vigilance in one's own practice and for avoiding getting caught in someone else's ethical lapses. The chapter also offers guidelines for sending out the right signals to create a set of expectations for ethical behavior when dealing with the consultant. Ethics can be defined simply as the principles or values by which one conducts himself or herself in practice. Independence of thought and objective analysis are the two great commandments of the independent security consultant and are prominent in the International Association of Professional Security Consultant's Code of Ethics. It is important for the modern-day security consultant dealing with risk issues on a global scale with many diverse cultures and values to understand that not everyone has the same value system as they or is interested in fair play. The ethical consultant can and should create high expectations for those who look to this industry for help. It is up to the consultant to raise the bar and create an environment where people are willing to work at a high ethical level because the security expert brings value to the process and because most people value a positive outcome or an honest assessment over unethical behavior.