|
Page 2 of 9 Ethics Law and ethics are related in an interesting fashion. Laws are usually based on ethics; however, laws do not cover every scenario that is where ethics come in. In other words, in a given scenario some things may not be against the law, but that does not mean that they are ethical. (ISC)2 (ISC)2 include following Code of Ethics principles: - Protect society, the common wealth and the infrastructure.
- Act honorably, honestly, justly, responsibly and legally.
- Provide diligent and competent service to principals.
- Advance and protect the profession.
Computer Ethics Institute Ten Commandments of Computer Ethics are: - One should not use a computer to harm other people.
- One should not interfere with other people’s computer work.
- One should not make uninvited queries in other people’s computer files.
- One should not use a computer to steal.
- One should not use a computer to bear false witness.
- One should not copy or use proprietary software for which you have not paid.
- One should not use other people’s computer resources without authorization or proper compensation.
- One should not appropriate other people’s intellectual output.
- One should think about the social consequences of the program you are writing or the system you are designing.
- One should always use a computer in ways that ensure consideration and respect for your fellow humans.
Internet Activities Board (IAB) It is the coordinating committee for Internet design, engineering, and management. IAB sees the use of the Internet as a privilege, which should be treated as such and used with respect. IAB defines the unethical and unacceptable behavior as follows: - Purposely seeking to gain unauthorized access to Internet resources
- Disrupting the intended use of the Internet.
- Wasting resources through purposeful actions.
- Destroying the integrity of computer-based information.
- Compromising the privacy of others.
- Involving negligence in the conduct of Internet-wide experiments.
Generally Accepted Information Security Principles (GAISP) GAISP was previously known as GASSP (Generally Accepted System Security Principles). GAISP committee seeks to develop and maintain GAISP with guidance from security professionals, IT product developers, information owners, and other organizations that have extensive experience in defining and stating the principles of information security.
|
