438 SLP

Module 4 - Case

ETHICAL, POLITICAL, AND SYSTEM MAINTENANCE ISSUES ON INFORMATION SECURITY

Case 4 is in two parts: information security standards and ethics.

Part I

Based on the reading materials at background section and your own research, prepare a 3-5 page report to address the following questions on ISO standards on information security management:

Describe the Plan-Do-Check-Act process.

What does this process accomplish?

Part II

Based on the reading materials at background section and your own research, prepare a 3-5 page report to answer the following questions

Discuss the difference between law and ethics;

Research the Sarbanes-Oxley Act of 2002 and discuss how it has impacted information security in an organization.