ISM 3321 – Security Essentials
Chapter 3 Question and Answers
1. What is the difference between law and ethics?
Difference between law and ethics are that laws are formal, usually written descriptions of actions and consequences while ethics are less formal and typically deal with how an individual or group of people view actions.
2. What is civil law, and what does it accomplish?
Civil Laws are laws that govern a nation and resolves conflicts between people and organizations.
3. What are the primary examples of public law?
Examples include Criminal, Administrative, and constitutional law.
4. Which law amended the Computer Fraud and Abuse Act of 1986, and what did it change?
The law that amended the Computer Fraud and Abuse Act of 1986 is the National Information Protection Act of 1996. It changed section of the CFA Act and also increased the penalties for selected crimes.
5. Which law was specifically created to deal with encryption policy in the United States?
The Security and Freedom through Encryption Act of 1999.
6. What is privacy in an information security context?
In the context of Information Security and as the text defines it, privacy is “state of being fee from unsanctioned intrusion.”
7. What is another name for the Kennedy-Kassebaum Act (1996), and why is it important to organizations that are not in the health care industry?
The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is another name for The Kenndy-Kassebaum Act (1996). It is important to other organizations due to the fact that the act’s privacy standards could be applied to any organization.
8. If you work for a financial service organization such as a bank or credit union, which 1999 law affects your use of customer data? What other affects does it have?
The Financial Services Modernization Act. Other effects that it contains are requiring notices to be