Assignment
In today's world the ever-changing social media and digital environments require professionals to have a solid foundation in law and ethics. As a future InfoSec professional, you will be required to understand the scope of your organization's legal and ethical responsibilities. Your role will be critical in helping to control the organization's liability for privacy and security risks.
Address each item below to demonstrate how one would build a reliable, ethical, and legal information system that businesses and consumers can trust.
Part I
As the computer forensics industry is growing, consider how the methods for handling computer crimes differ from traditional methods. Make sure to address the following:
i. What is the purpose of digital forensics?
ii. Explain why is it important for any organization to sustain a permanent digital forensics team?
iii. In digital forensics, must all investigations follow the same basic methodology? Justify your rationale and explain the steps involved in this methodology.
iv. In relation to digital forensics, list the applicable laws and policies related to cyber defense and describe the major components of each pertaining to the storage and transmission of data. Note: This information can be presented in a table or chart.
v. Using the organization you selected (Kenkruz healthcare Organization), discuss the legal rights of the organization or the user to perform forensic investigations on personal mobile devices that are part of your BYOD policy.
Part II
In many situations, multiple levels of government must work in partnership when ensuring security compliance. For each scenario, research and understand the Federal, State and Local Cyber Defense partners/structures. Then, identify the applicable law(s) it would fall under, as well as describe how the type of legal dispute (civil, criminal, private) affects the evidence used to resolve it. Note: This information can be presented in a table.
i. Transmission of underage photographs to various email addresses in CA, AZ, and CO
ii. Colonial Pipeline Hack
iii. Victim's identity used to open a new account
iv. Bank fraud/scam
v. A firm's credit card records are stolen
vi. Several cyberattacks penetrated several U.S. federal organizations
vii. Financial scandal
viii. Financial institutions refuse to disclose their privacy policies to their customers
ix. Patients' information is stolen
x. A candidate is not selected for employment due to a disability
Part III
When providing information assurance, a sound defense strategy does not only look at the legal aspects but also the ethical abuses of abilities on the job.
i. There are three main categories of unethical behavior that organizations must seek to minimize: Ignorance, Accident, and Intent. From your professional/personal experience, provide example(s) for each of the categories of some best practices for how to prevent such activities from happening.
ii. What happens when a job task borders on unethical from your personal viewpoint? Is your response to the issue any different than what you discussed above? What behaviors/tasks would an organization find acceptable where your personal viewpoint may not? Select 2-3 scenarios and discuss how you would address them from a Christian worldview. Consider Matthew 18:15-18. How could you apply this to a workplace scenario?
iii. Refer to the ISACA codes of conduct. Describe the responsibilities related to the handling of data as it pertains to legal, ethical and/or agency auditing issues.
iv. InfoSec professionals are under increasing pressure to provide global access to information/data without sacrificing security. Explain how the following can be used to manage security in your company's network: a) Firewalls, B) IDS, and C) IPS. Justify your rationales. Make sure to address how security practices, methods, and updates have been improved over time to address current global needs.