Quick Quiz What is the organization’s responsibility regarding information security? ANSWER: s. An organization must take measures—due care—to make sure that every employee knows what is acceptable ethical and legal behavior, what is not, and the consequences for such illegal or unethical actions. Should an organization refuse to take such measures, it increases its liability and can be held financially liable for any unethical or illegal behavior of an employee. Key Terms Ethics Long-arm (CERT/CC) jurisdiction Information Civil law Systems Security National Computer Association InfraGard Professional for (ISSA) Program Social Information (NIPC) Responsibility Warfare (IW) (CPSR) National Internet Security Agency Computer Engineering (NSA) Security Task Division (CSD) Privacy (IETF) Criminal law Private law Internet Society Cultural Public law (ISOC) Deterrence Restitution Jurisdiction Due Care Tort law Laws Due Diligence Secret Service Liability
Quick Quiz What is the organization’s responsibility regarding information security? ANSWER: s. An organization must take measures—due care—to make sure that every employee knows what is acceptable ethical and legal behavior, what is not, and the consequences for such illegal or unethical actions. Should an organization refuse to take such measures, it increases its liability and can be held financially liable for any unethical or illegal behavior of an employee. Key Terms (CERT/CC) Civil law Computer Professional for Social Responsibility (CPSR) Computer Security Division (CSD) Criminal law Cultural Deterrence Due Care Due Diligence Ethics Information Systems Security Association (ISSA) Information Warfare (IW) Internet Engineering Task (IETF) Internet Society (ISOC) Jurisdiction Laws Liability Long-arm jurisdiction National InfraGard Program (NIPC) National Security Agency (NSA) Privacy Private law Public law Restitution Tort law Secret Service
Ch09%20Law%20and%20Ethics.docx