Fichas
Professional, Legal, and Ethical Issues in Information Security
Fichas del conjunto (49)
- 1Aggregate informationcreated by combining pieces of non-private data—often collected during software updates, and via cookies—that when combined may violate privacy.
- 2Agreement on Trade-Related Aspects of Intellectual Property Rights (TRIPS)created by the World Trade Organization (WTO) and negotiated over the years 1986–1994, introduced intellectual property rules into the multilateral trade system.
- 3Association of Computing Machinery (ACM)a respected professional society that was established in 1947 as “the world’s first educational and scientific computing society.”
- 4Civil lawcomprises a wide variety of laws that govern a nation or state and deal with the relationships and conflicts between organizational entities and people.
- 5Computer Fraud and Abuse Act of 1986 (CFA Act)the cornerstone of many computer-related federal laws and enforcement efforts.
- 6Computer Security Act of 1987was one of the first attempts to protect federal computer systems by establishing minimum acceptable security practices.
- 7Criminal lawaddresses activities and conduct harmful to society, and is actively enforced by the state.
- 8Cultural moresthe fixed moral attitudes or customs of a particular group.
- 9Department of Homeland Security (DHS)made up of five directorates, or divisions, through which it carries out its mission of protecting the people as well as the physical and informational assets of the United States.
- 10Digital Millennium Copyright Act (DMCA)the American contribution to an international effort by the World Intellectual Properties Organization (WIPO) to reduce the impact of copyright, trademark, and privacy infringement, especially when accomplished via the removal of technological copyright protection measures.
- 11Due carewhen an organization makes sure that every employee knows what is acceptable or unacceptable behaviour, and knows the consequences of illegal or unethical actions.
- 12Due diligencerequires that an organization make a valid effort to protect others and continually maintains this level of effort.
- 13Economic Espionage Act in 1996attempts to prevent trade secrets from being illegally shared.
- 14Electronic Communications Privacy Act of 1986a collection of statutes that regulates the interception of wire, electronic, and oral communications.
- 15Ethicsdefine socially acceptable behaviors.
- 16Federal Privacy Act of 1974regulates government agencies and holds them accountable if they release private information about individuals or businesses without permission.
- 17Financial Services Modernization Act or Gramm-Leach-Bliley Act of 1999contains a number of provisions focusing on facilitating affiliation among banks, securities firms, and insurance companies.
- 18Fraud and Related Activity in Connection with Identification Documents, Authentication Features, and Information (Title 18, U.S.C. § 1028)criminalizes creation, reproduction, transfer, possession, or use of unauthorized or false identification documents or document-making equipment.
- 19Freedom of Information Actallows any person to request access to federal agency records or information not determined to be a matter of national security
- 20Georgia Computer Systems Protection Actseeks to protect information, and which establishes penalties for the use of information technology to attack or exploit information systems.
- 21Health Insurance Portability and Accountability Act Of 1996 (HIPAA)also known as the Kennedy-Kassebaum Act, protects the confidentiality and security of health care data by establishing and enforcing standards and by standardizing electronic data interchange.
- 22Information Systems Audit and Control Association (ISACA)a professional association that focuses on auditing, control, and security.
- 23Information Systems Security Association (ISSA)a nonprofit society of information security professionals.
- 24International Information Systems Security Certification Consortium, Inc. (ISC)2a nonprofit organization that focuses on the development and implementation of information security certifications and credentials.
- 25Jurisdictionthat is, the court’s right to hear a case if a wrong is committed in its territory or involves its citizenry.
- 26Lawsare rules that mandate or prohibit certain behaviour.
- 27Liabilityis the legal obligation of an entity that extends beyond criminal or contract law.
- 28Long arm jurisdictionthe long arm of the law extending across the country or around the world to draw an accused individual into its court systems.
- 29National Information Infrastructure Protection Act of 1996modified several sections of the previous act and increased the penalties for selected crimes.
- 30National InfraGard Programbegan as a cooperative effort between the FBI’s Cleveland Field Office and local technology professionals.
- 31National Security Agency (NSA)responsible for signal intelligence and information system security.
- 32Policiesguidelines that describe acceptable and unacceptable employee behaviors in the workplace.
- 33Privacy of Customer Information Sectionof the common carrier regulation states that any proprietary information shall be used explicitly for providing services, and not for any marketing purposes, and that carriers cannot disclose this information except when necessary to provide their services.
- 34Private law:encompasses family law, commercial law, and labour law, and regulates the relationship between individuals and organizations.
- 35Public lawregulates the structure and administration of government agencies and their relationships with citizens, employees, and other governments.
- 36Restitutionto compensate for wrongs committed.
- 37Security and Freedom through Encryption Act of 1999provides guidance on the use of encryption and provides protection from government intervention.
- 38System Administration, Networking, and Security Institute (SANS)founded in 1989, is a professional research and education cooperative organization with a current membership of more than 156,000 security professionals, auditors, system administrators, and network administrators
- 39U.S. Secret Servicean agency within the Department of the Treasury; provides protective services for key members of the U.S. government; charged with the detection and arrest of any person committing a United States federal offense relating to computer fraud and false identification crimes.
- 40USA PATRIOT Act of 2001provides law enforcement agencies with broader latitude in order to combat terrorism-related activities.
- 41USA PATRIOT Improvement and Reauthorization Actmade permanent fourteen of the sixteen expanded powers of the Department of Homeland Security and the FBI in investigating terrorist activity.
- 42To minimize liabilities/reduce risks, the information security practitioner must*Understand current legal environment
*Stay current with laws and regulations
*Watch for new issues that emerge - 43Lawsrules that mandate or prohibit certain societal behaviour
- 44Ethicsdefine socially acceptable behaviour
- 45Cultural moresfixed moral attitudes or customs of a particular group; ethics based on these
- 46Criteria for policy enforcement*Dissemination (distribution)
*Review (reading)
*Comprehension (understanding)
*Compliance (agreement)
*Uniform enforcement - 47Implementation of information security legislationcontributes to a more reliable business environment and a stable economy
- 48Severity of penalties judged on the purpose*For purposes of commercial advantage
*For private financial gain
*In furtherance of a criminal act - 49PrivacyIs a “state of being free from unsanctioned intrusion”
Información
- Descripción
- You must understand scope of an organization’s legal and ethical responsibilities. To minimize liabilities/reduce risks, the information security practitioner must: Understand current legal environment Stay current with laws and regulations Watch for new issues that emerge
- Creado por
- mfundo.falteni
- Visitas
- 358
- Etiquetas
- Valoración