An information security manager routinely monitored Web surfing among her company’s employees. She discovered that many employees were visiting the “sinful six” websites. (Note: The “sinful six” are websites with material related to pornography, gambling, hate, illegal activities, tastelessness, and violence.) She then prepared a list of the employees and their surfing histories and gave the list to management.

Some managers punished their employees. Some employees, in turn, objected to the monitoring, claiming that they should have a right to privacy.

a. Is monitoring of Web surfing by managers ethical? (It is legal.)

Support your answer.

b. Is employee Web surfing on the “sinful six” ethical? Support your answer.

c. Is the security manager’s submission of the list of abusers to management ethical? Why or why not?

d. Is punishing the abusers ethical? Why or why not? If yes, then what types of punishment are acceptable?

e. What should the company do in this situation? (Note: There are a variety of possibilities here.)