Ethical Behavior

For this discussion, you are asked to consider whether ethical behavior can be assured using the Personnel Security (PS) family of controls (as specified in NIST SP 800-53). Or is a Code of Ethics a better tool for promoting ethical behavior with respect to the use of information and information systems within a specific organization?
Your post must be submitted in this Discussion Forum and in the Discussion Assignment folder, where Turnitin will check it. Strive for a Turnitin score of 20% or less after filtering for quotations and references. Higher Turnitin scores alert the professor to review the file for academic integrity.
Write your response in the form of an opening statement for a debate. Pick one of the two positions below and construct a 3 to 5 paragraph argument for your position. Your argument will be strengthened by the use of authoritative sources and examples — this means you need to cite your sources and provide a list of references at the end of your posting.

1. Position #1 — a Code of Ethics is the stronger method for ensuring ethical behavior.
2. Position #2 — Implementation of Personnel Security Controls is the stronger method for ensuring employees act ethically.
   The discussion rubric requires that each deliverable includes the following elements:
   • Introduction
   • Analysis (supported by readings / research and citations)
   • Summary or Conclusion

SUGGESTED READINGS

1. Read Chapters 1 & 2 in (ISC)2 SSCP Systems Security Certified Professional Official Study Guide (3rd Edition) – (Chapters 1 & 2 Word Document Attached)
2. Read Executive Summary and Chapter 2 in NIST SP 800-53 rev. 5 – (NIST SP 800-53 PDF Document Attached)
3. Review Section 3.14 Personnel Security in NIST SP 800-53 rev. 5
4. Review (ISC)2 Code of Ethics