Legal Regulations, Compliance, and Investigation
Sairag 
ISOL633IIGUnit1_Chapter1and2.pptxISOL 633 Legal, Regulations, Investigations, and Compliance
UNIVERSITY OF THE CUMBERLANDS
School of Computing and Information Sciences
Fall IIG, 2018
Week One Agenda
Instructor and Course Introductions
Information Security Overview
Chapters 1 & 2
Assignments
Course Introduction
Master of Science in Information Security (“MSIS”) from the University of the Cumberlands
(ISC)2’s CISSP Certification
ISOL 633
Syllabus Review
Overview of Computer Crime Environment
Symantec’s Internet Security Threat Report 21 (April 2016)
Computer Criminals and Business Leaders, Opportunists Alike
Black’s Law Dictionary (2001)
computer crime. A crime requiring knowledge of computer technology, such as sabotaging or stealing data or using a computer to commit some other crime.
Why is Information Security an Issue?
University data attacks
Viruses infect and slow down networks
Bank customers’ data is stolen
Hackers breach a credit card’s data tables
Information
Personally Identifiable Information
Digital information
Hardcopy/paper-based information
What is Information Security?
Confidentiality
Integrity
Availability
What are Common Information Security Concerns?
Shoulder surfing
Social engineering
Phishing and targeted phishing scams
Malware
Spyware and keystroke loggers
Logic bombs
Backdoors
Denial of service attacks
What are some Mechanisms That Ensure Information Security?
Laws & Legal Duties
Contracts
Organizational Governance
Voluntary Organizations
What Is Privacy?
Why Is Privacy An Issue?
Privacy Laws
Personal Data & Workplace Privacies
Privacy Summary
Chapter Two: Privacy Overview
Chapter Two: Privacy Overview What Is Privacy?
When an individual has control over her or his personal data.
Data Collection
+ Data Use
+ Data Sharing
= = Control
Governmental Interference
Examples:
Financial Information
Health Information
Biometric Data
Criminal Records
Myriad Others….
Chapter Two: Privacy Overview Why Is Privacy An Issue?
Why is it important to you?
Private Information
Private Communications
What information or communications should be public?
Is there a right to privacy?
Security and Privacy
Information Security is a Process
The Process Creates Privacy
Privacy Rights = Individual Rights
Search and Privacy
Internet as a Source
Web Authors’ Rights
Personal Data Made Public
Chapter Two: Privacy Overview Elements of Information Security & Privacy
Information Security:
Access Control
Authentication
Authorization
Confidentiality
Data Integrity
Non-repudiation
Privacy:
Collection Limitation
Data Quality
Purpose Specification
Use Limitation
Security Safeguards
Openness
Individual Participation
Accountability
Chapter Two: Privacy Overview Privacy Laws
Sources:
Constitution
Federal Law
State Law
Common Law
Voluntary Agreements (Contract Law)
Federal Laws:
Privacy Act (1974)
Electronic Communications Privacy Act (1994)
USA Patriot Act (2001)
State Laws:
State Constitutions
New York Statute
State Caselaw
Chapter Two: Privacy Overview Personal Data Privacies
Technology Based Threats
Spyware, Keystroke Loggers, Adware
Cookies, Web Beacons, Clickstreams
RFID and GPS Technologies
Security Breaches
People Based Threats
Phishing
Social Engineering, Shoulder Surfing, Dumpster Diving
Social Networking Sites
Online Data gathering
Chapter Two: Privacy Overview Workplace Privacy & Monitoring
Telephone & Voicemail
Video Surveillance
Computer & Internet Use
Email Monitoring
Assignments
Chapters 1-3 of textbook (we’ll cover 3 next week)
Lab #1 Assessment Quiz (Due Sunday March 12)
Creating an IT Infrastructure Asset List and Identifying Where Privacy Data Resides
Lab #2 Assessment Quiz (Due Sunday March 12)
Case Study on U.S. Veterans Affairs and Loss of Privacy Information
