Incident from the public record:
select a recent or current incident from the public record and analyze the case to identify the issues that led to the incident. What recommendations can you make to ensure the incident will not occur again? What were the results of the incident? And, finally, what were the cultural, societal, or global impacts of this case and the subsequent changes to the legal environment? Please note: Your selection will need to be submitted and approved by the instructor.
Specifically the following critical elements must be addressed:
- Introduction
- Apply cyberlaw and security principles to the business, e-commerce, and e-communication industries. What purpose does the application of cyber principles serve for these industries?
- Summarize the selected case, including the necessary organizational information, industry, problem, and time period of the incident.
- Case Analysis
- Analyze the case to determine the ethical issues within the organization that may have led to the incident. What are these issues and why do you credit them for the incident?
- Determine legal compliance issues within the organization that may have led to the incident or could lead to future incidents. Were there any legal and ethical standards in existence at the time that were not followed by the organization? What were these issues and how did they impact the organization?
- Determine the societal and cultural impact of these compliance issues. Some things to consider in your assessment include specific targeting of demographic groups, victimization of certain customers, and so on.
- Incident Impact
- Determine the impact this incident may have had on the ethical and legal IT regulations of the time. If there were no direct results of this case, what may have been the indirect impact and/or what was the impact of similar cases? For example, what regulatory changes resulted from this or similar cases? What is your reasoning?
- Determine the connection between the industry standards and the standards in existence for information technology. Specifically, determine if the organization was lacking in either industry-specific or IT-specific alignment with regulations that may have contributed to the incident, and provide support for your conclusions. For example, misalignment with HIPAA laws in healthcare is an industry-specific deviation from standards.
- Cultural Impact: Analyze the influence this incident may have had on various cultural attitudes toward IT and cybercommunication or commerce. In other words, how could this incident impact views of information technology use ?
- Recommendations
- Propose relevant changes to the organization that may have prevented the incident. How would these changes have helped to prevent the occurrence?
- Propose reasonable ethical guidelines that could have helped prevent the incident and that might help the organization prevent future incidents.
- Propose changes to the standards external to the organization that might have helped prevent the incident. This can include changes to regulations and regulatory and ethical standards that might exist today but did not exist or were not properly delivered at the time of the incident. Be sure to support your conclusions.
- Global Considerations
- What international compliance standards (either at the time of the incident or today) would have been relevant to the incident, and how? If your company is not global, imagine that is.
- Analyze the impact of the incident on global communication and commerce (again, if your organization is not global, imagine otherwise). In other words, what impact did (or would) the incident have on views and use of information technology and communication in global contexts?
- Global Technology Environment: Based on your research and analysis of this case, determine the global legal and regulatory impacts this case had on the information technology overall. In other words, determine the relationship between this case and the global regulatory standards that are now in place, will be put in place shortly, or should be put in place as a result of this or related incident(s).
- Summary: Given your knowledge of cyberlaw principles, ethical needs, and legal compliance standards, summarize how you applied these principles to your analysis of the case. In other words, how did you apply cyberlaw principles to the circumstances, business model, and IT issues that the selected organization faced?