Professional, Legal, and Ethical Issues in Information Security

Aggregate information

Agreement on Trade-Related Aspects of Intellectual Property Rights (TRIPS)

Association of Computing Machinery (ACM)

Civil law

Computer Fraud and Abuse Act of 1986 (CFA Act)

Computer Security Act of 1987

Criminal law

Cultural mores

Department of Homeland Security (DHS)

Digital Millennium Copyright Act (DMCA)

Due care

Due diligence

Economic Espionage Act in 1996

Electronic Communications Privacy Act of 1986

Ethics

Federal Privacy Act of 1974

Financial Services Modernization Act or Gramm-Leach-Bliley Act of 1999

Fraud and Related Activity in Connection with Identification Documents, Authentication Features, and Information (Title 18, U.S.C. § 1028)

Freedom of Information Act

Georgia Computer Systems Protection Act

Health Insurance Portability and Accountability Act Of 1996 (HIPAA)

Information Systems Audit and Control Association (ISACA)

Information Systems Security Association (ISSA)

International Information Systems Security Certification Consortium, Inc. (ISC)2

Jurisdiction

Laws

Liability

Long arm jurisdiction

National Information Infrastructure Protection Act of 1996

National InfraGard Program

National Security Agency (NSA)

Policies

Privacy of Customer Information Section

Private law:

Public law

Restitution

Security and Freedom through Encryption Act of 1999

System Administration, Networking, and Security Institute (SANS)

U.S. Secret Service

USA PATRIOT Act of 2001

USA PATRIOT Improvement and Reauthorization Act

To minimize liabilities/reduce risks, the information security practitioner must

Laws

Ethics

Cultural mores

Criteria for policy enforcement

Implementation of information security legislation

Severity of penalties judged on the purpose

Privacy