COMM 205 Unit 8

Question 1

Definition: Ethics

Answer 1

The moral principles of right and wrong that individuals use to make choices that guide their behaviour

Question 2

Definition: Code of ethics

Answer 2

A collection of PRINCIPLES that are intended to guide decision making by members of an organization.

Question 3

Fundamental principles of ethics:

Answer 3

1. Responsibility – means that you accept the consequences of your decisions and actions.
2. Accountability – determines who is responsible for actions that were taken.
3. Liability – a legal concept meaning that individuals have the right to recover the damages done to them by other individuals, organizations, or systems.

Question 4

Definition: PRIVACY

Answer 4

Privacy – involve collecting, storing and disseminating personal information about individuals.

Question 5

Definition: Accuracy

Answer 5

Accuracy – involve the authenticity, fidelity and accuracy of information that is collected and processed.

Question 6

Definition: Property

Answer 6

Property – involve the ownership and value of information.

Question 7

Definition: Accessibility

Answer 7

Accessibility – revolve around who should have access to information and whether a fee should be paid for this access.

Question 8

Ethics and information technology:

Answer 8

1. PRIVACY
2. Accuracy
3. Property
4. Accessibility

Question 9

Definition: Information privacy

Answer 9

Privacy – the right to be left alone and to be free of unreasonable personal intrusion.
 Information privacy – the right to determine when, and to what extent, information about you can be gathered and/or communicated to others.
 It is about how personal information is collected and shared.
Information privacy legislation varies from Europe, the United States and Canada.

Question 10

Major concerns of personal information in databases

Answer 10

Some of the major concerns are:
 Can you change inaccurate data?
Personal Information in Databases
 Do you know where the records are?
 Are the records accurate?
 Under what circumstances will personal data be released?
 How are the data used?

Question 11

Opt-in vs. opt-out model

Answer 11

Opt-in Model – PROHIBITS an organization from collecting any personal information UNLESS the customer specifically authorizes it.
Opt-out model – PERMITS the company to collect personal information UNTIL the customer specifically requests that the data not be collected.

Question 12

Privacy policy guidelines for data collection

Answer 12

 Data should be collected on individuals only for the purpose of accomplishing a legitimate business objectives.
Data Accuracy
 Data should be kept current, where and when necessary.
Data Confidentiality
 Computer security procedures should be implemented to
ensure against unauthorized disclosure of data.

Question 13

Definition: Information security

Answer 13

Information Security – consists of the processes and policies designed to PROTECT an organization’s information and information systems (IS) from UNAUTHORIZED access, use, disclosure, disruption, modification or destruction.
Information must be PROTECTED to maintain a company’s competitive advantage.
Information must be protected to maintain customer PRIVACY.

Question 14

How much should you spend on IT?

Answer 14

“Security is a trade-off between risk and cost, and enterprises in different industries may spend more or less depending on their situation.”

Question 15

Definition: Vulnerability

Answer 15

Vulnerability – the POSSIBILITY that the system will be harmed by a threat.
 Five key factors that affect the vulnerability of organizational information resources:
1. Today’s interconnected, interdependent, wirelessly networked business environment
2. Smaller, faster, cheaper computers and storage devices
3. Decreasing skills necessary to be a computer hacker
4. International organized crime taking over cybercrime
5. Lack of management support.

Question 16

Major categories of threats

Answer 16

There are two major categories of threats:
 unintentional threats
 deliberate threats

Question 17

The greatest threat to a business information system are (the first line of defence):

Answer 17

The greatest threat to a business information system are insiders, employees and authorized users of the IS:
 Negligence, mistakes and ignorance of the consequences of risky behavior.
 Victims of social engineering.

Question 18

Definition: Social Engineering

Answer 18

Social engineering is a non-technical method of intrusion
hackers use that relies heavily on human interaction and often involves TRICKING PEOPLE into breaking normal security procedures. It is one of the greatest threats that organizations today encounter.

Question 19

Human errors:

Answer 19

The higher the level of employee, the greater the threat he or she poses to information security.
Other employees include contract labour, consultants, and janitors and guards.
 Human errors or mistakes by employees pose a large problem as the result of laziness, carelessness, or a LACK OF AWARENESS concerning information security.
 This lack of awareness comes from POOR EDUCATION AND TRAINING efforts by the organization.

Question 20

Conclusion

Answer 20

The ethical and moral issues are largely influenced by people’s individual ethical beliefs.
 A variety of policies exist in organizations to help enforce proper information ethics and INFORMATION PRIVACY behaviours.
The effectiveness of information security measures and information POLICIES is highly dependent upon the PEOPLE in the organization who enforce and enact these measures and policies.