Xiaoling Wu

ITS 370

Ch 3 Homework

 

Exercises:

  1. For what kind of information security jobs does the NSA recruit? Use the Internet to visit its Web page and find out.

Answer: The NSA’s ongoing mission involves monitoring, gathering, and decoding foreign communication signals from around the world, as well as information assurance. To meet this goal, the NSA actively recruits people with computer and engineering backgrounds as well as people who are conversant in foreign languages. Current job titles listed at the NSA’s Web site include Inspector General Auditor/IT Specialist, Mathematician, Computer Scientist, Cryptanalyst, Electronic and Computer Engineer, Signals Analyst, Signals Intelligence (SIGINT) Systems Engineering Architect, and Linguist.

 

1.      4. Using a Web browser, go to www.eff.org. What are the current top concerns of this organization?

Answer: A top concern of the EFF is spearheading a movement to repeal the Children’s Internet Protection Act of 2000 (CIPA). According to the EFF, the software being used is not effective at blocking out pornography and instead is blocking thousands of sites that should not be blocked, hurting students’ ability to learn.

The EFF is also leading a coalition of civil liberties groups in urging a secret appeals court to reject the Justice Department’s bid for broadly expanded powers to spy on U.S. citizens. According to the EFF’s Web site, “At issue in the case—which has focused a spotlight on the ultra-secret Foreign Intelligence Surveillance Court—is whether the Constitution and the USA PATRIOT ACT adopted by Congress after the Sept. 11 terrorist attacks permit the government to use looser foreign intelligence standards to conduct criminal investigations in the United States.”

 

Case Exercises:

Iris called the company’s security hotline. The hotline is an anonymous way to report suspi- cious activity or abuse of company policy, although Iris chose to identify herself. The next morning, she was called to a meeting with an investigator from corporate security, which led to more meetings with others from corporate security and then with the director of human resources and Gladys Williams, the CIO of SLS.

Discussion Questions

  1. Should Iris have approached Henry directly, or was the hotline the most effective way to take action? Why do you think so?

Answer: Iris should not approach Henry directly. If Iris had approached Henry, it might had become a personal matter rather than professional. Following the proper protocol is the best way to report in any organization.

  1. Should Gladys call the legal authorities? Which agency should she call?

Answer: Might be there is an involvement of legal authorities in this case, because the case may be leading to the theft. So, making a call to the Federal Trade Commission will be the appropriate one. The company will always try to avoid the problem like whistleblowing, leaking the vibrant information to the media, so they might have a deal within the company to keep full stop for all this.

 

  1. Do you think this matter needs to be communicated elsewhere inside the company? Who should be informed and how? How about outside the company?

Answer: Again the same things should not be happened inside the company, so this matter has to be forwarded to all the managements without the specifying the names who gets involved in it and also the supplementary ways of preventing this event to be forwarded. There is no necessity for spreading information about this event outside the company unless there is a contribution of the officials already. It might become the vulnerability of the company and might foremost surveillance to the company.

 

Ethical Decision Making

It seems obvious that Henry is doing something wrong. Do you think Henry acted in an eth- ical manner? Did Iris act in an ethical manner by determining the owner of the flash drive? Assuming that this incident took place in the United States, what law or laws has Henry vio- lated? Suppose Iris had placed the flash drive back at the coffee station and forgotten the whole thing. Explain why her action would have been ethical or unethical.

Answer: What Henry was doing was not ethical as stealing. Using information from the flash drive without the notice or permission of the company is sheer unethical behavior whereas Iris was ethical and mentioned things ethically. Even if this would have been inside at a coffee station Iris should have reported this incident and the Security team should have taken cared. The issue is unethical and what iris did was ethical.