<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:arial,helvetica,sans-serif;font-size:12pt"><div>It is not unethical to comment about a student's interest in the material, aptitude for learning, level of participation, knowledge and experience brought to classroom discussions, etc.<br><br>It would be unethical to answer questions for which the instructor did not have immediate first hand knowledge simply to "make a name" as someone with credentials who will help a candidate get a security job.<br><br>Depending on the nature of the reference questions, it could be necessary for the instructor to clarify the limit to his/her familiarity with the candidate. In fact, I would strongly recommend a statement such as, "My relationship with the candidate is based on his/her participation in a course that I teach. I will be happy to respond to questions with that in mind."<br><br>I agree with
Brandon and Meena that the question of ethical/unethical depends on what types of reference questions were asked and how the instructor responded. <br></div><div style="font-family: arial,helvetica,sans-serif; font-size: 12pt;"><br><div style="font-family: arial,helvetica,sans-serif; font-size: 13px;"><font size="2" face="Tahoma"><hr size="1"><b><span style="font-weight: bold;">From:</span></b> "Holland, Brandon" <hollandb@frmaint.com><br><b><span style="font-weight: bold;">To:</span></b> The CISSP Study Mailing list <cisspstudy@cccure.org><br><b><span style="font-weight: bold;">Sent:</span></b> Thursday, June 11, 2009 1:50:36 PM<br><b><span style="font-weight: bold;">Subject:</span></b> Re: [Cisspstudy] CISSP Ethics Question<br></font><br>
I don't think you can just say "no" an instructor can't give a good reference for a student or yes he can absolutely without knowing more. It has to do with misrepresenting the reference/relationship. <br><br>If the student misrepresents the reference to get the job and if you misrepresent your relationship to get him the job, then him and you were both being unethical.<br><br>So the questions are:<br>Was it that the questions asked just happened to be questions you could authoritatively answer in a positive way? You did nothing wrong there. (And the student probably listed you correctly on his resume so that the employer would know which questions to, and not to, ask)<br><br>Or did you answer questions you couldn't have known to avoid hurting your reputation? I don't know what you mean exactly by "lose my reputation" since it shouldn't hurt your rep to answer that you don't know, when in fact you don't know - even if that
impacts whether or not the student gets the job.<br><br>On the contrary, it SHOULD hurt your rep if you DID in fact lie or misrepresent the depth/degree/etc of your relationship with the student (even if that means the student gets the job). Maybe it'd affect your "karma" if you believe that kind of thing. :)<br><br>Brandon Holland<br><br>-----Original Message-----<br>From: <a ymailto="mailto:cisspstudy-bounces@cccure.org" href="mailto:cisspstudy-bounces@cccure.org">cisspstudy-bounces@cccure.org</a> [mailto:<a ymailto="mailto:cisspstudy-bounces@cccure.org" href="mailto:cisspstudy-bounces@cccure.org">cisspstudy-bounces@cccure.org</a>] On Behalf Of Mike Archuleta<br>Sent: Thursday, June 11, 2009 10:42 AM<br>To: The CISSP Study Mailing list<br>Subject: [Cisspstudy] CISSP Ethics Question<br><br>Now this is interesting!! As the instructor long have you known this person? <br><br>As the instructor did the student show\exhibit extensive
knowledge in the security areas?<br><br>Last question when the employeer called asking about the student did you feel you had to walk a fine line because some of the questions asked where outside your relationship? <br><br>Sent from my iPhone<br><br>On Jun 11, 2009, at 9:32 AM, Nimal Gunarathna <<a ymailto="mailto:ng949@yahoo.com" href="mailto:ng949@yahoo.com">ng949@yahoo.com</a>> wrote:<br><br><br><br>Hello Everyone,<br> <br>This is a Legal/Ethics domain question:<br> <br>If I am a CISSP instructor and say I have a bunch of students in my class. If a person in my class add my name as a reference for a security job application. The related employee is calling me to get reference. I give great reference for him. (In my part this could be due the person is really good or it could be that I don't want lose my reputation..) In this scenario, is the instructor (me) acted ethically?<br> <br>Thanks.<br><br>
_______________________________________________<br> cisspstudy mailing list<br> <a ymailto="mailto:cisspstudy@cccure.org" href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a><br><span> <a target="_blank" href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org">http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</a></span><br> <br><br>_______________________________________________<br>cisspstudy mailing list<br><a ymailto="mailto:cisspstudy@cccure.org" href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a><br><a href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target="_blank">http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</a><br></div></div></div><br>
</body></html>