Instructions:

1. Read the Case carefully.

2. Use the attached Analysis Template to answer the questions about the case.

3. No, you will not have all the information. You will have to make some assumptions.

4. Support your answers.

A Stolen Password and Its AfterEffects

Dr. Alan Preston works at Hillcrest Rehabilitation Group, a drug and alcohol rehabilitation facility. Dr. Preston holds private and group meetings with individuals who have had problems with various addictions. He records his sessions using a wireless camera mounted on the ceiling of his meeting rooms. After each session, he makes notes from the sessions and stores them on his work laptop.

Last week, Dr. Preston was going to take some well-deserved vacation time. He was packing up his brief case when his son, Daniel, popped into his office. Daniels computer wasnt working and he needed to get a school assignment submitted by 5:00 pm. He asked his dad for his password so he could submit the report to his teacher.

Dr. Preston hesitated remembering the new cybersecurity policies his facility had put in place to protect their clients files but it was his son after all. He told Daniel the password. Daniel didnt think he could remember it so he wrote it on his notepad. Dr. Preston told him to shred the page after submitting the assignment. It was going to take a few minutes so Dr. Preston said he would retrieve the car from the parking deck and meet him downstairs.

Dr. and Mrs. Preston left for a romantic week in the country leaving their son Daniel to care for the house and pets.

The next morning at 4 am, the Prestons home phone woke Daniel from a deep sleep. Daniel was exhausted he had worked until 12 am and had a few drinks with friends before collapsing in bed.

DANIEL: Hello! he snapped.

VOICE: "Sorry to wake you. I need to speak with Dr. Preston. This is Mary Smith, systems administrator for the Hillcrest Rehabilitation Group.

DANIEL: Sorry. My father is out of town.

VOICE: Oh dear. Oh no. OMG. Did he take his laptop with him? I really need to speak with him now. It is an emergency.

DANIEL: Uh no. His laptop is in his office.

VOICE: There was been an attempted break in of his system. I really need his password.

DANIEL: Im sorry but hes where theres no cell service. I could drive up there in the morning.

VOICE: That will be too late. Look I wouldnt normally ask but do you know your fathers password? I am really in a bind here.

Daniel remembered the notepad. He had forgotten to shred the page that had his fathers password on it. He gave Mary the information and went back to bed.

Dr. Mike Allred was awakened by his wife on Tuesday morning. She showed him a blog that listed all of Dr. Prestons patients names, addresses, phone numbers, their treatment information and links to videos.

Dr. Allred is the Dean of Religious Studies at Prairie University. Dr. Allred, is one of Dr. Prestons patients. He had been discharged by Dr. Preston last week. He had taken a semester sabbatical to address a health issue.

SECURITY ANALYSIS ASSIGNMENT

Preliminary Analysis:

1. Identify the primary ethical dilemma to be resolved? (example privacy, freedom of speech etc)

2. Identify any legal violations involved in this case? (DMCA, fraud, HIPPA, 1st Amendment, etc)

3. List the state, regional, national and/or global laws/ordinances/treaties already in place regarding the particular issues in this case. (hint: chapter 3)

4. Identify 6lawsuits (US or International) which might set a precedent or that would affect this case?

5. Does the act violate corporate policy?

6. Does the act violate any codes of conduct or ethics? If so, list code that apply from either ACM, AITP, or IEEE.

7. Identify the general ethical societal impacts/dilemmas both local and global - (higher taxes, more government regulation, cultural clashes, war).

Step I. Understanding the situation

A. List and number the relevant facts, check whether the fact is an ethics or legal issue, identify potential harm.

Number Fact Ethical Legal Both Ethical/Legal Potential or resulting harm

1B. List the stakeholders involved.

C. Which of the above facts has a societal impact?

1. List the local (US) impact of the ethical dilemma.

2. List the Global impact of the ethical dilemma

Step II. Isolating the major ethical dilemma.

A. Restate the primary ethical issue using the form:

Should someone do or not do something? Or should someone have done something different? (Replacing someone and something with specifics of your case.)

B. Are there any additional ethical or legal dilemmas? If so, identify them.

Step III. Analyzing the ethicality of alternatives in Step II.

A. Based on the situations in your case:

1. Who, if anyone, could be or has been harmed?

2. Who, if anyone, could benefit or has benefited?

Step IV. Making a decision and planning the implementation

A. What should he do?

Make a defensible ethical decision.

What should have been done or not done in the first place (at the pivot point) to avoid this dilemma and what is now the best course of action?

Indicate the ethical principles/codes of conduct that support your decision.

Identify the effects your decision will have on the major stakeholders of this case.