Legal Issues in Information Security TASK 2

Document Content and Description Below

ORGANIZATION GUIDELINES AND STANDARDS Organization 1 SANS Institute is a well-known organization that provides intensive training designed to help IT security professionals master the practical ste... ps necessary for defending systems and networks against the most dangerous threats. SANS Guidelines One guideline that struck out to me is “I will conduct my business in a manner that assures the IT profession is considered one of integrity and professionalism.” Furthermore, not to use availability and access to information for personal gains through corporate espionage. Tie to Case Study Within the case study, Carl Jasper used his position to have other employees create dummy accounts for the sole purpose of information gathering on outside governments as well as internal departments including, HR, and finance. Organization 2 GIAC is also a well-known organization that provides certifications to validate the realworld skills of IT security professionals. GIAC’s Guidelines In GIAC’s code of ethics states “The scope and responsibilities of an information security professional are diverse and afford a great deal of responsibility and trust in protecting the confidentiality, integrity and availability of an organization’s information assets.” Tie to Case Study There are two situations in the case study that go against GIAC’s guidelines. The first is when Carl Jasper signed a no [Show More]

Last updated: 1 year ago

Preview 1 out of 6 pages