After reading the case presented in the module, write a short response to the following discussion questions and ethical decision making scenario. 1. Discussion Questions Do you think the response of the company so far indicates any flaws in company policy or practices that are revealed in the incident?

After reading the case presented in the module, write a short response to the following discussion questions and ethical decision making scenario. 1. Discussion Questions Do you think the response of the company so far indicates any flaws in company policy or practices that are revealed in the incident?

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter2: Compliance: Law And Ethics

Section: Chapter Questions

Problem 1DQ

See similar textbooks

Similar questions

After reading the case presented in the module, write a short response to the following discussion questions and ethical decision making scenario. Discussion Questions Before the discussion at the start of this chapter, how do Fred, Gladys, and Charlie each perceive the scope and scale of the new information security effort? Did Fred’s perception change after that? How should Fred measure success when he evaluates Gladys’ performance for this project? How should he evaluate Charlie’s performance? Which of the threats discussed in this chapter should receive Charlie’s attention early in his planning process?
Describe what the GRANT statement means and how it relates to safety. Are there any restrictions on the privileges that may be bestowed upon someone? What steps must be taken before they may be revoked?
Give an explanation of the GRANT statement and how it pertains to safety. What kinds of privileges may be given to the student? How are they taken away?
1a. How did you found out about the incident and how did you manage to pinpointthe staff responsible for the incident? Create a fictional but reasonable scenarioto answer this question.
A) Examine a scenario when you were faced with an ethical challenge while carrying out a task using technology. B) What was the ethical issue? C) What caused the challenge? D) What decision did you take?
Have you experienced scope creep in your development of a Risk Management Plan (or other policy)? If so, how did you handle it? If not, what actions would you have taken to control scope creep? (Remember, if you have not personally experienced this situation, please research a company or individual who has dealt with scope creep and provide a brief overview of their situation. Be sure to copy/paste the link from which you retrieved the information)
Are you able to tell the difference between dangers that are unavoidable and those that can be avoided or mitigated?
Review each scenario carefully and respond to each question as either (very ethical, ethical, neither ethical nor unethical, unethical, very unethical) and justify your choice. A student found a loophole in the university computer’s security system that allowed him access to other students’ records. He told the system administrator about the loophole but continued to access others’ records until the problem was corrected two weeks later. The student’s action in searching for the loophole was: The student’s action in continuing to access others’ records for two weeks was: The system administrator’s failure to correct the problem sooner was:
Can you provide a thorough description of the concept of risk?
What are the five risk-control methods you employ?
The term "responsibility" refers to the act of determining whether or not a person is responsible for his or her own actions. Which of the following is the most secure option? It is critical that you provide an explanation for your behavior.
How do you decide which vulnerabilities are most critical?