Security Policy, Legal, Ethics, and Compliance

• Information Assets and Systems
• Information Classification
• Labeling and Handling Standards
• Information Systems Inventory
• Understanding Data Loss Prevention Technologies
• Summary

• The Employee Life Cycle
• The Importance of Employee Agreements
• The Importance of Security Education and Training
• Summary

• Understanding the Secure Facility Layered Defense Model
• Protecting Equipment
• Summary

• Standard Operating Procedures
• Operational Change Control
• Malware Protection
• Data Replication
• Secure Messaging
• Activity Monitoring and Log Analysis
• Service Provider Oversight
• Threat Intelligence and Information Sharing
• Summary

• Access Control Fundamentals
• Infrastructure Access Controls
• User Access Controls
• Summary

• System Security Requirements
• Secure Code
• Cryptography
• Summary

• Incident Response
• What Happened? Investigation and Evidence Handling
• Data Breach Notification Requirements
• Summary

• Emergency Preparedness
• Business Continuity Risk Management
• The Business Continuity Plan
• Plan Testing and Maintenance
• Summary

• The Gramm-Leach-Bliley Act
• New York's Department of Financial Services Cybersecurity Regulation (23 NYCRR Part 500)
• What Is a Regulatory Examination?
• Personal and Corporate Identity Theft
• Summary

• The HIPAA Security Rule
• The HITECH Act and the Omnibus Rule
• Understanding the HIPAA Compliance Enforcement Process
• Summary

• Protecting Cardholder Data
• PCI Compliance
• Summary

• Introducing the NIST Cybersecurity Framework Components
• The Framework Core
• Framework Implementation Tiers ("Tiers")
• NIST's Recommended Steps to Establish or Improve a Cybersecurity Program
• NIST's Cybersecurity Framework Reference Tool
• Adopting the NIST Cybersecurity Framework in Real Life
• Summary

• Introduction
• Subjective Relativism
• Cultural Relativism
• Divine Command Theory
• Ethical Egoism
• Kantianism
• Act Utilitarianism
• Rule Utilitarianism
• Social Contract Theory
• Virtue Ethics
• Comparing Workable Ethical Theories
• Morality of Breaking the Law
• Summary
• Further Reading and Viewing
• Discussion Questions
• In-Class Exercises
• References

3 LiveLab in this lesson — see the labs panel →

• Introduction
• Intellectual Property Rights
• Protecting Intellectual Property
• Fair Use
• Digital Media
• Peer-to-Peer Networks and Cyberlockers
• Protections for Software
• Legitimacy of Intellectual Property Protection for Software
• Open-Source Software
• Creative Commons
• Summary
• Further Reading and Viewing
• Discussion Questions
• In-Class Exercises
• References

4 LiveLab in this lesson — see the labs panel →

• Introduction
• Perspectives on Privacy
• Information Disclosures
• Data Mining
• Examples of Consumer or Political Backlash
• Summary
• Further Reading and Viewing
• Discussion Questions
• In-Class Exercises
• References

2 LiveLab in this lesson — see the labs panel →

• Introduction
• US Legislation Restricting Information Collection
• Information Collection by the Government
• Covert Government Surveillance
• US Legislation Authorizing Wiretapping
• USA PATRIOT Act
• Regulation of Public and Private Databases
• Data Mining by the Government
• National Identification Card
• Information Dissemination
• Invasion
• Summary
• Further Reading and Viewing
• Discussion Questions
• In-Class Exercises
• References

3 LiveLab in this lesson — see the labs panel →

• Introduction
• How Well Developed Are the Computing Professions?
• Software Engineering Code of Ethics
• Analysis of the Code
• Case Studies
• Whistle-Blowing
• Summary
• Further Reading and Viewing
• Discussion Questions
• In-Class Exercises
• References

1 LiveLab in this lesson — see the labs panel →