Ethical Concern with AI

CyberSecurity: Regulations, law, ethics, and compliance practice quiz

1. Which law addresses privacy and security concerns associated with the electronic transmission of PHI?

• National Information Infrastructure Protection Act of 1996
• Health Information Technology for Economic and Clinical Health Act
• USA Patriot Act of 2001
• American Recovery and Reinvestment Act

2.
Which act is a collection of statutes that regulates the interception of wire, electronic, and oral communications?

• National Information Infrastructure Protection Act of 1996
• Federal Privacy Act of 1974
• The Telecommunications Deregulation and Competition Act of 1996
• The Electronic Communications Privacy Act of 1986

3.
Which of the following is an international effort to reduce the impact of copyright, trademark, and privacy infringement, especially via the removal of technological copyright protection measures?

• PCI DSS
• DMCA
• Gramm-Leach-Bliley Act
• U.S. Copyright Law

4.
There are three general categories of unethical behavior that organizations and society should seek to eliminate. Which of the following is NOT one of them?

• Ignorance
• Malice
• Accident
• Intent

5.
Which of the following organizations put forth a code of ethics designed primarily for InfoSec professionals who have earned their certifications? The code includes the canon: Provide diligent and competent service to principals.

• IEEE
• ACM
• (ISC)2
• NIST

CyberSecurity: Regulations, law, ethics, and compliance - Practice Quiz

Regulations, law, ethics, and compliance practice quiz

1.
Ethics carry the sanction of a governing authority.

• True
• False

2.
Deterrence is the best method for preventing an illegal or unethical activity.

• True
• False

3.
Due diligence requires that an organization make a valid and ongoing effort to protect others.

• True
• False

4.
The Gramm-Leach-Bliley (GLB) Act (also known as the Financial Services Modernization Act of 1999) contains a number of provisions that affect banks, securities firms, and insurance companies.

• True
• False

5.
Information ambiguation occurs when pieces of non-private data are combined to create information that violates privacy.

• True
• False

Answer:
False, True, True, True, False

CyberSecurity: Categories of Unethical Behavior - Policies and Law

========================================================================

Three general categories of Unethical Behavior are:

1. Accident; who makes mistakes and result in threats to information
2. Intent; intent of doing wrong
3. Ignorance; they just don't know any better

Laws and policies deters because of following three conditions

1. Fear of penalty
2. Probability of being caught
3. Probability of penalty being administered

========================================================================


 

We always seek to deter unethical and illegal behavior. How do you do that as an information security professionals? use tools that is already available; they are

1. Policy
2. Education and Training
3. Technology to protect information

Many studies has concluded that we can deter unethical behavior through the use of policies
and laws. However, for this to happen three conditions needs to be satisfied:

1. The person who's about to violate the policy and commit the unethical or illegal behavior has to fear the penalty, which of course supposes that there is a penalty.
2. The person has to expect that if they violate the policy or law, they have a high
   probability of being caught.
3. The person has to expect that if caught, there is a high probability that the penalty will
   be applied – no let off with a warning.