What term describes a limited set of rights the community has agreed to follow, shaping cybersecurity practices and ethical standards?

• A. Customary Law
• B. Formal Treaties
• C. Domestic Law
• D. Administrative Law

Answer: (A)

Customary law is formed by long-standing practice and the belief that such practice is legally required. It shapes cybersecurity practices and ethical standards because professionals and organizations adopt widely accepted norms even without formal written agreements. This unwritten set of expectations guides what is considered permissible testing, responsible disclosure, incident handling, and other ethical boundaries across different groups and jurisdictions. It differs from formal treaties, which are explicit written agreements between states; domestic law, which governs a single country; and administrative law, which concerns government agency rules and procedures.