Title: Module 3 Objectives and Activities List
Course: IN 2001 Principle of Information Assurance > Section: Module 3: Chapter Three

Learning Objectives

By successfully completing this module, the student will be able to:

- Describe the functions of and relationships among laws, regulations and professional organizations in information security
- Differentiate between laws and ethics
- Identify major national laws that affect the practice of information security
- Explain the role of culture as it applies to ethics in information security

Learning Activities

- Read Chapter 3
- Read the Instructor Notes

Overview:

As a fundamental part of the SecSDLC investigation process, a careful examination of current legislation, regulation and common ethical expectations of both national and international entities provides key insights into the regulatory constraints that govern business.  This chapter examines several key laws that shape the field of information security and it presents a detailed examination of computer ethics necessary to better educate those implementing security.  Although ignorance of the law is no excuse, it’s considered better than negligence (knowing and doing nothing).  This chapter also presents several legal and ethical issues that are commonly found in today’s organizations, as well as formal and professional organizations that promote ethics and legal responsibility.

Assessment Activities

- Complete Discussion Question 3
- Complete Exercise 3
- Complete Quiz 3