Usec 2.1

Law

Rules that mandate or prohibit certain behavior and are enforced by the state.

Ethics

Regulate and define socially acceptable behavior.

Policies

Managerial directives that specify acceptable and unacceptable employee behavior in the workplace.

Cultural Mores

Fixed moral attitudes or customs of a particular group.

Liability

The legal obligation of an entity extending beyond criminal or contract law; includes the legal obligation to make restitution.

Restitution

The legal obligation to compensate an injured party for wrongs committed.

Due Care

The legal standard requiring a prudent organization to act legally and ethically and know the consequences of actions.

Due Diligence

The legal standard requiring a prudent organization to maintain the standard of due care and ensure actions are effective.

Jurisdiction

A court's right to hear a case if the wrong was committed in its territory or involved its citizenry.

Long-Arm Jurisdiction

Application of laws to those residing outside a court's normal jurisdiction, usually when a person acts illegally within the jurisdiction and leaves.

Civil Law

Governs nation or state; manages relationships/conflicts between organizations and people.

Criminal Law

Addresses activities and conduct harmful to society; actively enforced by the state.

Private Law

Family, commercial, and labor law; regulates relationships between individuals and organizations.

Public Law

Regulates structure/administration of government agencies and their relationships with citizens, employees, and other governments.

Computer Fraud and Abuse Act of 1986 (CFA Act)

The cornerstone of many computer-related federal laws and enforcement efforts.

USA PATRIOT Act of 2001

Provides law enforcement agencies with broader latitude to combat terrorism-related activities.

Computer Security Act of 1987

One of the first attempts to protect federal computer systems by establishing minimum acceptable security practices.

Privacy

The right of individuals or groups to protect themselves and personal information from unauthorized access.

Identity Theft

Occurs when someone steals a victim's personally identifiable information (PII) and poses as the victim to conduct actions or make purchases.

Payment Card Industry Data Security Standards (PCI DSS)

Offers a standard of performance to which organizations processing payment cards must comply.

Council of Europe Convention on Cybercrime

Created an international task force to oversee Internet security functions and standardize international technology laws.