Exercises

1.  What does CISSP stand for? Use the Interne to identify the ethical rules CISSP holders have agreed to follow.

 

-      Certified Information Systems Security Professional, Code of Ethics Canons: Protect society, the common good, necessary public trust and confidence, and the infrastructure. Act honorably, honestly, justly, responsibly, and legally. Provide diligent and competent service to principals. Advance and protect the profession.

 

2.  For what kind of information security job does the NSA recruit? Use the Internet to visit its Web page and find out.

 

-      Intelligence Analysis, Foreign Language Analysis, Computer Science, Cyber, Engineering and Physical Sciences, Mathematical Sciences, Business Accounting and Budget, Inspection Investigation and Compliance, Law and Legal Services,

-       Medical and Occupational Health, Security and Law Enforcement, Human Resources, Education and Training, General Administrative Support, Communication and Public Affairs, Infrastructure and Logistics.

 

Case Exercises

1.  Should Iris have approached Henry directly, or was the hotline the most effective way to take action? Why do you think so?

 

-      The hotline was the most effective way of settling this problem. Because itís morally right to do and who would want a bad reputation.

 

2.  Should Gladys call the legal authorities? Which agency should she call?

 

-      Yes, for attempted theft of information. FBI should be called.

 

3.  Do you think this matter needs to be communicated elsewhere inside the company? Who should be informed and how? How about outside the company?

 

-      She would have to notify the Accounting department and the executive level of SLS by meeting of the breach. The press can be told there was some privileges that werenít supposed to be there.

 

Ethical Decision Making

1.  It seems obvious that Henry is doing wrong. Do you think Henry acted in an ethical manner? Did Iris act in an ethical manner by determining the owner of the flash drive? Assuming that this incident took place in the United States, what law or laws has Henry violated? Suppose Iris had placed the flash drive back at the coffee station and forgotten the whole thing. Explain why her action would have been ethical or unethical.

 

-      No, he did not act in an ethical manner. Yes, Iris did. Henry violated privacy of others. It could have been seen as unethical if SLS reviewed footage of the event and noticed Henry went in there with the USB then without the USB and then Iris and then she left then Jill came and grabbed the USB. Then for ethical is just privacy of whose flash drive it is but normal people would not put such revealing information on a device they could lose.