Ethics in Technology D333
Exam/50 Accurate Q’s with A’s
Ethics - -A code of behavior that is defined by the group to which an
individual belongs
- Morals - -The personal principles upon which an individual bases his or her
decisions about what is right and wrong
- Foreign Corrupt Practices Act (FCPA) - -Makes it a crime to bribe a foreign
official, a foreign political party official, or a candidate for foreign political
office
- US-CERT - -A partnership between DHS and the public and private sectors
that was established to protect the nation's Internet infrastructure against
cyberattacks by serving as a clearinghouse for information on new viruses,
worms, and other computer security topics
- Internal Control - -the process established by an organization's board of
directors, managers, and IT group to provide reasonable assurance for the
effectiveness and efficiency of operations, the reliability of financial
reporting, and compliance with applicable laws and regulations.
Best achieved through separation of duties
- Gramm-Leach-Bliley Act (GLBA) - -Established mandatory guidelines for the
collection and disclosure of personal financial information by financial
institutions; requires financial institutions to document their data security
plans; and encourages institutions to implement safeguards against
pretexting
- The Fair and Accurate Credit Transaction Act - -Allows consumers to
request and obtain a free credit report each year
- Family Educational Rights and Privacy Act (FERPA) - -Provides students and
their parents with specific rights regarding the release of student records
- Executive Order 12333 - -Defines the various government intelligence-
gathering agencies and defines what information can be collected, retained,
and disseminated by the agencies. It allows for the tangential collection of
U.S. citizen data—even when those citizens are not specifically targeted
, - Electronic Communication Privacy Act (ECPA) - -1) Protection of
communication while in transfer from sender to receiver
2) Protection of communications held in electronic storage
3) Prohibition of devices from recording, dialing, routing, addressing, and
signaling information without a search warrant
-Passed as an amendment to Wiretap Act
- Title III of the Omnibus Crime Control and Safe Streets Act / Wiretap Act - -
Regulates interception of wire/telephone and oral communication. A warrant
must be obtained from a judge to conduct a wiretap, who can approve the
warrant only if there is probable cause
- Communications Assistance for Law Enforcement Act (CALEA) - -Requires
the telecommunications industry to build tools into its products that federal
investigators can use—after gaining a court order—to eavesdrop on
conversations and intercept electronic communications
- USA Patriot Act - -Modified 15 existing statutes and gave sweeping new
powers both to domestic law enforcement and to international intelligence
agencies, including increasing the ability of law enforcement agencies to
eavesdrop on telephone communication, intercept email messages, and
search medical, financial, and other records; the act also eased restrictions
on foreign intelligence gathering in the United States
- USA Freedom Act - -Terminated the bulk collection of telephone metadata
by the NSA instead requiring telecommunications carriers to hold the data
and respond to NSA queries for data. The act also restored authorization for
roving wiretaps and the tracking of lone wolf terrorists
- Organization for Economic Co-operation and Development for the
Protection of Privacy and Transborder Flows of Personal Data (OECD) - -
Created a set of fair information practices that are often held up as the
model for organizations to adopt for the ethical treatment of consumer data.
International organization consisting of 35 countries
- European Union Data Protection Directive - -Requires member countries to
ensure that data transferred to non-EU countries is protected. It also bars the
export of data to countries that do not have data privacy protection
standards comparable to those of the EU, included stopgap measure
between EU and US
- General Data Protection Regulation (GDPR) - -Addresses the export of
personal data outside the EU enabling citizens to see and correct their
personal data, standardizing data privacy regulations within the EU, and
establishing substantial penalties for violation of its guidelines
Exam/50 Accurate Q’s with A’s
Ethics - -A code of behavior that is defined by the group to which an
individual belongs
- Morals - -The personal principles upon which an individual bases his or her
decisions about what is right and wrong
- Foreign Corrupt Practices Act (FCPA) - -Makes it a crime to bribe a foreign
official, a foreign political party official, or a candidate for foreign political
office
- US-CERT - -A partnership between DHS and the public and private sectors
that was established to protect the nation's Internet infrastructure against
cyberattacks by serving as a clearinghouse for information on new viruses,
worms, and other computer security topics
- Internal Control - -the process established by an organization's board of
directors, managers, and IT group to provide reasonable assurance for the
effectiveness and efficiency of operations, the reliability of financial
reporting, and compliance with applicable laws and regulations.
Best achieved through separation of duties
- Gramm-Leach-Bliley Act (GLBA) - -Established mandatory guidelines for the
collection and disclosure of personal financial information by financial
institutions; requires financial institutions to document their data security
plans; and encourages institutions to implement safeguards against
pretexting
- The Fair and Accurate Credit Transaction Act - -Allows consumers to
request and obtain a free credit report each year
- Family Educational Rights and Privacy Act (FERPA) - -Provides students and
their parents with specific rights regarding the release of student records
- Executive Order 12333 - -Defines the various government intelligence-
gathering agencies and defines what information can be collected, retained,
and disseminated by the agencies. It allows for the tangential collection of
U.S. citizen data—even when those citizens are not specifically targeted
, - Electronic Communication Privacy Act (ECPA) - -1) Protection of
communication while in transfer from sender to receiver
2) Protection of communications held in electronic storage
3) Prohibition of devices from recording, dialing, routing, addressing, and
signaling information without a search warrant
-Passed as an amendment to Wiretap Act
- Title III of the Omnibus Crime Control and Safe Streets Act / Wiretap Act - -
Regulates interception of wire/telephone and oral communication. A warrant
must be obtained from a judge to conduct a wiretap, who can approve the
warrant only if there is probable cause
- Communications Assistance for Law Enforcement Act (CALEA) - -Requires
the telecommunications industry to build tools into its products that federal
investigators can use—after gaining a court order—to eavesdrop on
conversations and intercept electronic communications
- USA Patriot Act - -Modified 15 existing statutes and gave sweeping new
powers both to domestic law enforcement and to international intelligence
agencies, including increasing the ability of law enforcement agencies to
eavesdrop on telephone communication, intercept email messages, and
search medical, financial, and other records; the act also eased restrictions
on foreign intelligence gathering in the United States
- USA Freedom Act - -Terminated the bulk collection of telephone metadata
by the NSA instead requiring telecommunications carriers to hold the data
and respond to NSA queries for data. The act also restored authorization for
roving wiretaps and the tracking of lone wolf terrorists
- Organization for Economic Co-operation and Development for the
Protection of Privacy and Transborder Flows of Personal Data (OECD) - -
Created a set of fair information practices that are often held up as the
model for organizations to adopt for the ethical treatment of consumer data.
International organization consisting of 35 countries
- European Union Data Protection Directive - -Requires member countries to
ensure that data transferred to non-EU countries is protected. It also bars the
export of data to countries that do not have data privacy protection
standards comparable to those of the EU, included stopgap measure
between EU and US
- General Data Protection Regulation (GDPR) - -Addresses the export of
personal data outside the EU enabling citizens to see and correct their
personal data, standardizing data privacy regulations within the EU, and
establishing substantial penalties for violation of its guidelines
