Principles of Information Security: Legal, Ethical, and Professional Issues

These flashcards cover key concepts and vocabulary from the Principles of Information Security regarding legal, ethical, and professional issues.

Laws

Rules that mandate or prohibit certain behavior and are enforced by the state.

Ethics

Principles that regulate and define socially acceptable behavior.

Cultural mores

Fixed moral attitudes or customs of a particular group.

Liability

The legal obligation of an entity extending beyond criminal or contract law.

Restitution

The legal obligation to compensate an injured party for wrongs committed.

Due care

The legal standard requiring a prudent organization to act legally and ethically.

Due diligence

The legal standard requiring a prudent organization to maintain due care and ensure actions are effective.

Jurisdiction

A court’s right to hear a case if the wrong was committed in its territory or involved its citizenry.

Long-arm jurisdiction

Application of laws to those residing outside a court’s normal jurisdiction.

Policies

Managerial directives that specify acceptable and unacceptable employee behavior in the workplace.

Civil law

Governs relationships/conflicts between organizations and people.

Criminal law

Addresses activities harmful to society and is actively enforced by the state.

Public law

Regulates the structure and administration of government agencies.

Information Security legislation

Contributes to a reliable business environment and a stable economy in the U.S.

Privacy

The right of individuals to protect personal information from unauthorized access.