Cyber law And Ethics

Welcome

To

Course code - HUT257

Course coordinator

Prof. Devishree Naidu

Cyber law And Ethics
Course Outcomes
1. To identify and analyze statutory , Regulatory, constitutional , and
organizational laws that affects the software Professional.

2. To understand various cyber laws with respect to legal dilemmas in the

information field

3. To interpret various Intellectual property Rights, privacy ,protection issues in

software development field.

4. To understand role of ethics in IT

Cyber law And Ethics in IT
Course overview
● Cyber laws and Rights in Digital age
IT Act, IPR issues related to the use of data
● Cyber Crimes
Individuals, Institute, State
Hacking ,Digital forgery, cyber terrorism, offenses under IT Act .
● Ethics:
Business world, IT sector, IT professionals, DOS, exploits type.
Cyber law And Ethics
Course Overview
● Intellectual property
Copy-rights, patents, IPR issues, Plagiarism, ethical issues,
Trade secret laws, cybersquatting.
● Privacy
Privacy right, protection, key privacy anonymity issues,
identity theft, consumer Profiling, national security.
● Ethics in IT organisation
Cyber law And Ethics
Assessment Method
MCQ
Survey conduction
Case study submission

TA 1 TA 2 TA 3

MCQ based Case Study Survey

Exam Conduct
Cyber law And Ethics
Text Book

George Reynolds, “Ethics in Information Technology”,

5th Edition cengage learning

Cryptography and E-commerce by Hon C Graff , Wiley

Publisher, 2001
Ethics
“Integrity is doing the right thing, even when nobody's watching”.
Anonymous

Ethics is a set of beliefs about right and wrong behavior within a society. Ethical
behavior conforms to generally accepted norms which are almost universal.

However, behaviors: lying and cheating are unethical,

Ethical behavior can vary dramatically: Examples
attitudes toward software piracy—a form of copyright infringement that involves
making copies of software or enabling others to access software to which they
are not entitled—range from strong opposition to acceptance of the practice as a
standard approach to conducting business
Ethics
The Difference Between Morals, Ethics, and Laws

Morals are one’s personal beliefs about right and wrong, while the term
ethics describes standards or codes of behavior expected of an individual
by a group (nation, organization,profession) to which an individual belongs.
For example, the ethics of the law profession demand that defense
attorneys defend an accused client to the best of their ability, even if they
know that the client is guilty of the most heinous and morally objectionable
crime one could imagine.
Cyber law And Ethics
Law is a system of rules that tells us what we can and cannot
do. Laws are enforced by a set of institutions (the police,
courts, law-making bodies). Legal acts are acts that conform
to the law. Moral acts conform to what an individual believes
to be the right thing to do. Laws can proclaim an act as legal,
although many people may consider the act immoral—for
example, abortion.
Ethics in business world
Bathsheba syndrome—
A reference to the biblical story of King David, who became corrupted by his power
and success.According to the story, David became obsessed with Bathsheba, the
wife of one of his generals, and eventually ordered her husband on a mission of
certain death so that he could marry Bathsheba.
Even lower-level employees can find themselves in the middle of ethical
dilemmas.
Examples:
A low-level employee of the Technical Services Department of Monroe Country,
Florida, was entrusted with responsibility for both acquisition and distribution of the
country’s cell phones. A few months after her retirement,the employee was
indicted on charges of stealing 52 country-purchased iPhones and iPads and then
selling them to friends and coworkers.
Ethics
Most common forms of employee misconduct
Type of employee misconduct Percent of surveyed employees observing this behavior

Misuse of company time 33%

Abusive behavior 21%
Lying to employees 20%
Company resource abuse 20%
Violating company Internet-use policies 16%
Discrimination 15%
Conflicts of interest 15%
Inappropriate social networking 14%
Health or safety violations 13%
Lying to outside stakeholders 12%
Stealing 12%
Falsifying time reports or hours worked 12%
Ethics
Corporate Social Responsibility
Corporate social responsibility (CSR) is the concept that an organization should act ethically by taking
responsibility for the impact of its actions on the environment, thevcommunity, and the welfare of its
employees.

Supply chain sustainability

is a component of CSR that focuses on developing and maintaining a supply chain that meets the needs
of the present without compromising the ability of future generations to meet their needs. Supply chain
sustainability takes into account such issues as fair labor practices, energy and resource conservation,
human rights, and community responsibility.

For example, many fast-food hamburger outlets (including McDonald’s, Wendy’s,and Burger King) have
expanded their menus to include low-fat offerings in an attempt to meet a CSR goal of providing more
healthy choices to their customers, while also trying to capture more market share.
Ethics
Organization Examples of socially responsible activities

Dell Inc. Dell partners with nonprofit organizations to develop ways of using technology to help
solve pressing problems. Its “Powering the Positive” program initiatives include Children’s Cancer
Care, Youth Learning,Disaster Relief, and Social Entrepreneurship.

Google recently invested over $250 million in solar and wind power projects.

IBM employees donated 3.2 million hours of community service in 120 countries in 2019.

Oracle supports K-12 and higher education institutions with technology education grants and
programs that reach 1.5 million students each year.

Microsoft conducts an annual giving campaign, and its employees have contributed over $1 billion
to some 31,000 nonprofit organizations around the world since 1983.
Ethics
Corporate ethics officer (also called a corporate compliance officer)
provides an organization with vision and leadership in the area of business
conduct. This individual “aligns the practices of a workplace with the stated ethics
and beliefs of that workplace, holding people accountable to ethical standards.”

Organizations send a clear message to employees about the importance of ethics

and compliance in their decision about who will be in charge of the effort and to
whom that individual will report. Ideally, the corporate ethics officer should be a
well-respected, senior-level manager who reports directly to the CEO. Ethics
officers come from diverse backgrounds, such as legal staff, human resources,
finance, auditing, security, or line operations.
Ethics
INTEL CODE OF CONDUCT
JANUARY 2012
Code of Conduct
Since the company began, uncompromising integrity and professionalism have been the
cornerstones of Intel’s business. In all that we do, Intel supports and upholds a set of core
values and principles. Our future growth depends on each of us understanding these
values and principles and continuously demonstrating the uncompromising integrity that is
the foundation of our company.
The Code of Conduct sets the standard for how we work together to develop and deliver
product, how we protect the value of Intel and its subsidiaries (collectively known as
‘Intel’), and how we work with customers, suppliers and others. All of us at Intel must
abide by the Code when conducting Intel-related business.
The Code affirms our five principles of conduct:
• Conduct Business with Honesty and Integrity
• Follow the Letter and Spirit of the Law
• Treat Each Other Fairly
• Act in the Best Interests of Intel and Avoid Conflicts of Interest
• Protect the Company’s Assets and Reputation
Ethics
Manager’s checklist for establishing an ethical work environment
Question ---Yes / No
Does your organization have a code of ethics?
Do employees know how and to whom to report any infractions of the code of ethics?
Do employees feel that they can report violations of the code of ethics safely and without fear of
retaliation?
Do employees feel that action will be taken against those who violate the code of ethics?
Do senior managers set an example by communicating the code of ethics
and using it in their own decision making?
Do managers evaluate and provide feedback to employees on how they operate
with respect to the values and principles in the code of ethics?
Are employees aware of sanctions for breaching the code of ethics?
Do employees use the code of ethics in their decision making?

INCLUDING ETHICAL CONSIDERATIONS IN DECISION MAKING--- A Flow

Ethics for IT Workers
Topic Outcomes :
1. This will summarise characteristic that distinguish a
professional from an IT worker

2. Assess if IT workers is a professional or not

3. Analyze the professional behaviour towards customers

4. Evaluate key ethical issue when he interacts with the different

user
Ethics for IT Workers
What is a Profession ?
A type of job that requires special training or skills the people
who work in a particular profession.

--IT workers position in work.

-- Academic preparation to Qualify as IT workers
Big data : data scientist, Data Analyst….

---IT in legal perspective

Ethics for IT Workers
Ethical issues between IT workers and Employer

----Software piracy
---Use of Social media during work time
---Rules and policies violation by the employee.

Trade secret
---Its a valuable information
---provides economic value
---sharing information outside
Ethical issues between IT Workers & Employer
● Harassment
● Whistleblowing

IT related Trade Secret

---- Google search algorithm.
Ethical issues for IT Workers & Employer
Trade secret Formula

---KFC

---krispy kreme

---Amul ice cream (Swad INDIA ka….. :))

--- Cocakola
Ethical issues between IT Workers and Supplier

Bribe or Gift
Bribe:
Secret not morally acceptable
Sometimes made through third party
Encourages recipient to act favourably towards the donor

Gift:
Gift is made openly and publicly as gesture of goodwill
Made directly from donor to recipient
No expectation of future favour
Professional Societies

1. ACM- Association for computing Machinery

(www.acm-india.org)

2. CSI - Computer Society of India (www.csi-india.org)

3. IEEE-CS IEEE chapter with CSI society

4. Association of Information Technology Professionals (AITP)

5. SysAdmin, Audit, Network, Security (SANS) Institute

IT Professional Malpractice
Negligence has been defined as not doing something that a reasonable
person would do, or doing something that a reasonable person would not
do. Duty of care refers to the obligation to protect people against any
unreasonable harm or risk.
In the IT arena, consider a hypothetical negligence case in which an
employee inadvertently destroyed millions of customer records in an
Oracle database.The standard of measure would be higher if the
defendant were a licensed, Oracle certified database administrator
(DBA) with 10 years of experience rather than an unlicensed systems
analyst with no DBA experience or specific knowledge of the Oracle
software.
Common Ethical Issues for IT Users

a. Software Piracy
b. Inappropriate Use of Computing Resources
c. Inappropriate sharing of Information

Support for Ethical practices for IT User

● Establishing Guidelines for Use of Company Software
● Defining the Appropriate Use of IT Resources
● Structuring Information Systems to Protect Data and
Information.
● Installing and Maintaining a Corporate Firewall
Discussion

Your old roommate from college was recently let go from his firm
during a wave of employee terminations to reduce costs. You two
have kept in touch over the six years since school, and he has
asked you to help him get a position in the IT organization where
you work. You offered to review his résumé, make sure that it gets
to the “right person,” and even put in a good word for him.
However, as you read the résumé, it is obvious that your friend
has greatly exaggerated his accomplishments at his former place
of work and even added some IT-related certifications you are
sure he never earned.What would you do?
Discussion

The daughter of the firm’s CEO is scheduled to participate in

a job interview for an entry level position in the IT
organization next week. You are a second-year employee in
your firm’s IT organization who will participate in the
interview process.
You will be one of three people who will interview her to form
an assessment and make a group decision about whether or
not she will be offered the position. How do you handle this
situation?