CP3302_Chap3

(Review Question 14) How does due diligence differ from due care? Why are both important?

- Due diligence requires that an organisation make a valid effort to protect others and continually maintain this level of effort. - Due care is when an organisation makes sure that every employee knows what is acceptable or unacceptable behavior and knows the consequences of illegal or unethical actions. - Both are important for a company to practice to limit its liability.

(Review Question 11) What is intellectual property (IP)? Is it ordered the same protection in every country of the world? What laws currently protect it in the United States and Europe?

- Intellectual property is a protected asset in the U.S. - - Copyright law currently protects it in the US and some other countries.

(Review Question 3) What are the primary examples of public law?

-Criminal law, Administrative law and constitutional law

(Review Question 1) What is the difference between law and ethics?

-laws carry the authority of a governing body, and ethics do not -In other words laws are legally enforceable but ethics are not.

(Review Question 2) What is civil law and what does it accomplish?

-laws that are used to govern a nation or state. -deal with the relationships and conflicts between organizational entities and people

What are the 5 criteria policy must meet to become legally enforceable?

1) Dissemination (distribution) - The organization must be able to demonstrate that the relevant policy has been made readily available for review by the employee. 2) Review (reading) - the organisation must show that employees were in a format which each employee could interpret. 3) Comprehension (Understanding) - the organisation must show that all employees understood the requirements and content of the policy. 4) Compliance (agreement) - the organisation must show that each employee agreed to and signed the document. 5) Uniform enforcement - the organisation must demonstrate that the policy was distributed to all employees regardless of rank or position.

What is the definition of law(s)

rules that mandate or prohibit certain behavior and ethics is behavior deemed socially acceptable by society.

What are the 4 types of law?

Civil, Criminal, Private and Public

The general recognised term for the government protection afforded to intellectual property (written and electronic) is _________

Copyright law

What is a type of law that addresses violations harmful to society and that is enforced by prosecution by the state

Criminal law

(Review Question 17) What is the best method for preventing an illegal or unethical activity?

Deterrence is the best method for preventing an illegal or unethical activity. In order for deterrence to be effective, those affected by the deterrence must: a) fear the penalty, b) have an expectation of detection/apprehension c) expect that if caught the penalty will apply

What is due diligence?

Due diligence is when an organisation makes a valid effort to protect other and continually maintain this effort.

__________ define socially acceptable behaviors

Ethics

__________ occurs when someone uses your personally identifying information, like your name, Social Security number, or credit card number, without your permission, to commit fraud or other crimes.

Identity theft

__________ is a body of expectations that describe acceptable and unacceptable employee behaviors in the workplace.

Policy

___________ is a type of law that regulates the relationship between an individual and an organisation.

Private law

What is a type of law that regulates the structure and administration of government agencies.

Public law

(Review Question 18) Of the information security organizations listed that have codes of ethics, which has been established for the longest time? When was it founded?

The Association of Computing Machinery was established in 1947 as the world's first educational and scientific computing society.

(Review Question 19) Of the organizations listed that have a code of ethics, which is focused on auditing and control?

The information systems audit and control association. (ISACA)

(Review Question 20) What can be done to deter someone from committing a crime?

Three elements are considered necessary to control behavior: a) fear of penalty - potential offenders must fear the penalty. Threats of informal reprimand or verbal warnings may not have the same impact as the threat of imprisonment or forfeiture of pay. b) probability of being caught - potential offenders must believe there is a strong possibility of being caught. Penalties will not deter illegal or unethical behavior unless there is reasonable fear of being caught. c) Probability of penalty being administered - potential offenders must believe that the penalty will in fact be administered.

(Review Question 15) What is a policy? How does it differ from a law?

a) A policy is a formalised body of expectations that describe acceptable and unacceptable employee behaviors in the workplace. b) People can plead ignorance as a defence to a policy but not laws.

What is the definition of ethics

behavior deemed socially acceptable by society.

(Review Question 13) What is due care? Why would an organization want to make sure it exercises due care in its usual course of operations?

due care has been taken when an organisation makes sure that every employee knows what is acceptable or unacceptable behavior and knows the consequences of illegal or unethical actions. An organisation will want to ensure due care is taken limit its chance of liability.

What is a type of law that represents all of the laws that apply to a citizen (or subject) of a jurisdiction?

Civil law

(Review Question 6) What is privacy in an information security context?

Being free from unsanctioned intrusion

_________ define rules that mandate or prohibit certain behavior

Laws

__________ is the legal obligation of an entity that extends beyond criminal or cultural law

Liability