C15 - LEGAL AND ETHICS IN INFO SECURITY

What is the definition of laws in the context of information security?

• Rules that define unaccepted behavior

• Rules that mandate or prohibit certain societal behavior

• Rules that ensure corruption of customer information

• Rules that govern professional behaviour

What is the main purpose of deterrence in preventing illegal or unethical activities?

• To educate employees on ethical behaviors

• To establish professional organizations

• To create fear of penalty and increase probability of being caught

• To develop codes of ethics

What is the primary factor in leveling ethical perceptions within a small population?

• Technical controls

• Laws and policies

• Education

• Professional organizations

What is the main difference between laws and ethics?

• Laws carry sanctions of a governing authority, ethics do not

• Ethics mandate certain societal behaviors, laws do not

• Laws define socially acceptable behavior, ethics do not

• Ethics are rules that prohibit certain behaviors, laws are rules that mandate behaviors

What is the purpose of codes of ethics in professional organizations?

• To guide ethical behavior

• To encourage unethical behavior

• To establish laws and policies

• To deter illegal activities

What is the definition of privacy in the context of information security?

• State of being free from unsanctioned intrusion

• Ability to share information freely

• Ability to aggregate data from multiple sources

• State of being free from ethical dilemmas

What is the main challenge in determining ethical behaviors across different cultures?

• Cultural differences

• Lack of laws and policies

• Lack of professional organizations

• Technological advancements

What is the role of information security professionals in understanding state regulations?

• To encourage violation of regulations

• To ensure organization is compliant with regulations

• To establish new regulations

• To ignore regulations

What is the best method for preventing illegal or unethical activities?

• Establishing professional organizations

• Developing technical controls

• Implementing laws and policies

• Creating fear of penalty and increasing probability of being caught

What is the purpose of policy in organizations?

• To replace laws

• To establish professional organizations

• To serve as organizational laws

• To encourage unethical behavior