Chapter 5: Compliance: Law and Ethics Key terms

Ethics

The branch of philosophy that considers the nature, criteria, logic, and validity of moral judgment.

Deterrence

The act of attempting to prevent an unwanted action by threatening punishment or retaliation on the instigator if they perform the action.

Computer Fraud and Abuse (CFA) Act of 1986

The cornerstone of many computer-related federal laws and enforcement efforts.

Computer Security Act (CSA) of 1987

A U.S. law designed to improve the security of federal information systems.

Privacy Act of 1974

A U.S. law that regulates the government’s collection, storage, use, and dissemination of individual personal information contained in records maintained by the federal government.

Electronic Communications Privacy Act (ECPA) of 1986

A collection of U.S. statutes that regulate the interception of wire, electronic, and oral communications, commonly referred to as the “federal wiretapping acts.”

Health Insurance Portability and Accountability Act (HIPAA) of 1996

A law that attempts to protect the confidentiality and security of healthcare data by establishing and enforcing standards and by standardizing electronic data interchange. Also known as the Kennedy-Kassebaum Act.

Liability

An entity’s legal obligation or responsibility.

Restitution

A legal requirement to make compensation or payment resulting from a loss or injury.

Due diligence

The reasonable steps taken by people or organizations to meet the obligations imposed by laws or regulations.

Jurisdiction

The area within which an entity such as a court or law enforcement agency is empowered to make legal decisions.

Long-arm jurisdiction

The ability of a legal entity to exercise its influence beyond its normal boundaries by asserting a connection between an out-of-jurisdiction entity and a local legal case.

InfraGard

A U.S. association consisting of regional chapters of the FBI and affiliations of public, private, and academic organizations that cooperate to exchange information on the protection of critical national information resources.