Security Privacy and Ethical Issues in Information Systems

Security, Privacy, and Ethical Issues in Information Systems and the Internet Chapter 14 MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 1

Principles and Learning Objectives • Policies and procedures must be established to avoid computer waste and mistakes. – Describe some examples of waste and mistakes in an IS environment, their causes, and possible solutions. – Identify policies and procedures useful in eliminating waste and mistakes. MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 2

Principles and Learning Objectives • Computer crime is a serious and rapidly growing area of concern requiring management attention. – Explain the types and effects of computer crime. – Identify specific measures to prevent computer crime. – Discuss the principles and limits of an individual’s right to privacy. MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 3

Principles and Learning Objectives • Jobs, equipment, and working conditions must be designed to avoid negative health effects. – List the important effects of computers on the work environment. – Identify specific actions that must be taken to ensure the health and safety of employees. – Outline criteria for the ethical use of information systems. MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 4

Social Issues in Information Systems MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 5

Computer Waste & Mistakes MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 6

Computer Waste • Discard technology • Unused systems • Personal use of corporate time and technology MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 7

Preventing Computer Waste and Mistakes • • Establish Policies and Procedures Implement Policies and Procedures Monitor Policies and Procedures Review Policies and Procedures MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 8

Preventing Computer-Related Waste and Mistakes MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 9

Implementing Policies and Procedures MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 10

Computer Crime MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 11

Number of Incidents Reported to CERT MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 12

Computer Crime and Security Survey MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 13

The Computer as a Tool to Commit Crime • • Social engineering Dumpster diving Identity theft Cyberterrorism MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 14

Computers as Objects of Crime • Illegal access and use – Hackers vs. crackers – Script bunnies – Insiders MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 15

Illegal Access and Use MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 16

Data Alteration and Destruction • Virus – Application virus – System virus – Macro virus • Worm • Logic bomb MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 17

Data Alteration and Destruction MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 18

Top Viruses – July 2002 MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 19

Top Viruses – July 2002 MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 20

Computers as Objects of Crime • • Information and equipment theft Software and Internet piracy Computer-related scams International computer crime MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 21

Preventing Computer-Related Crime • Crime prevention by state and federal agencies • Crime prevention by corporations – Public Key Infrastructure (PKI) – Biometrics • Antivirus programs MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 22

Preventing Computer-Related Crime • Intrusion Detection Software • Managed Security Service Providers (MSSPs) • Internet Laws for Libel and Protection of Decency MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 23

Preventing Crime on the Internet • Develop effective Internet and security policies • Use a stand-alone firewall with network monitoring capabilities • Monitor managers and employees • Use Internet security specialists to perform audits MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 24

Common Methods Used to Commit Computer Crimes MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 25

How to Protect Your Corporate Data from Hackers MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 26

Privacy MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 27

Privacy Issues • • Privacy and the Federal Government Privacy at work E-mail privacy Privacy and the Internet MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 28

Using Antivirus Programs MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 29

Fairness and Information Use MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 30

Federal Privacy Laws and Regulations • The Privacy Act of 1979 • Gramm-Leach-Bliley Act • USA Patriot Act MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 31

Other Federal Privacy Laws MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 32

Other Federal Privacy Laws MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 33

The Work Environment MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 34

Health Concerns • Repetitive stress injury (RSI) • Carpal tunnel syndrome (CTS) • Ergonomics MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 35

Avoiding Health and Environment Problems • • Maintain good posture and positioning. Don’t ignore pain or discomfort. Use stretching and strengthening exercises. Find a good physician who is familiar with RSI and how to treat it. MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 36

Medical Topics on the Internet MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 37

Ethical Issues in Information Systems • The AITP Code of Ethics – Obligation to management – Obligation to fellow AITP members – Obligation to society • The ACM Code of Professional Conduct – Acquire and maintain professional competence MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 38

AITP Code of Ethics MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 39

Summary • Computer waste - the inappropriate use of computer technology and resources in both the public and private sectors • Software and Internet piracy - represent the most common computer crime • Ethics - determine generally accepted and discouraged activities within a company MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 40