Chapter 3: Legal, Ethical, and Professional Issues in Information Security

Exercises

3.) Using the resources in your library, find out what laws your state has passed to prosecute computer crime.

            From Code Section 943.70 of the Wisconsin Law, It says “Offenses against computer data and programs is if offense is to defraud or obtain property, class I; if damage greater than $2500 or act causes interruption or impairment of govt operations or public utility or service, class D; if offense creates risk of death or bodily harm to another, class F; offense against computer, computer equipment or supplies is class I if offense is done to defraud or obtain property; class H if damage is under $2500; and class F if act creates risk of death or bodily harm to another”.

4.) Using a Web browser, go to www.eff.org. What are the current top concerns of this organization?

            One of the most recent articles for concern was that schools are pushing boundaries on the use of surveillance technology. Students at some schools are being watched in almost every aspect. Some schools are using cameras, some schools have microphones to detect aggressive tones, some schools are even monitoring social media and use of phones in school. There is no evidence that surveilling students in school will lead to better grades either. Does this link to an invasion of privacy?

Case Exercises

1.)    Should iris have approached Henry directly, or was the hotline the most effective way to take action? Why do you think so?

The hotline would have been the most effective way to deal with this situation. If Iris approached Henry directly, there could have been back lash, or bribery, or even some form of threats for finding out about the flash drive.

2.)    Should Gladys call the legal authorities? Which agency should she call?

I think since Gladys is the CIO of the company, she will decide whither they should call the legal authorities or if they will deal with it within the company. They should call the FBI if they decide to go into investigation for the selling of information.

3.)    Do you think this matter needs to be communicated elsewhere inside the company? Who should be informed and how? How about outside the company?

I think that the CEO should be involved and maybe the other chief officers of the company to assess the damage and see how bad the situation is. They should all be called into a meeting; nothing should be communicated over text or emails. I think that keeping this situation to their selves is a good idea until they know the extend of the damage.

Ethical Decision Making

 I think that Henry did not act in an ethical manner. Henry knew what he was doing with the information on the flash drive and had intentions to use it for personal gain. Iris acted ethically sine she called the hotline right away to report the flash drive and its contents. There were multiple laws that Henry broke having that hard drive, and if Iris left it there and forgot about it could be controversial. If she knew what was on it she would have acted unethical by not reporting it but if she didn’t know what was on the flash drive and did nothing about it, she couldn’t have known what it was.