20: Session Ethics and Privacy Introduction to Information Systems BMGT301 Spring 2012 Barney Corwin
q
Current Status
Agenda
Your Questions and Concerns Quick Quiz Grades and Answers Articles and Videos of Interest Extra Credit Opportunity: TechFest 2012 5:30-8:30 VMH 1528 Homework due today: Examples of Facebook Features, Facebook Security Settings Ethics & Information Security (Baltzan 4) Understanding Software: A Primer for Managers (Gallaugher: Chapter 9)
Barney Corwin - Smith 2
q
Today's Discussion:
q
What's Next (4/11/12):
4/8/2012
q
TechFest2012
Wednesday April 11 from 5:30pm to 8:30pm at VMH 1528 Presentations:
Microsoft: Windows 8, Kinect, Surface and Windows Mobile MicroStrategy: BI and SI technologies Paradyme Management: Case study of applying BI tools
Facebook page http://www.facebook.com/smithtechfest Extra credit (class participation) for attending the event 4/8/2012 pizzas will be provided after the event Barney Corwin - Smith 3 Free
Individual Homework For 4/9/2012
Please prepare a typed document (max. of 500 words, double spaced) to answer the following questions. 1. Cite effective examples of Facebook features on other websites?
If you haven't seen any, search for them on a few sites.
a.
b.
Why do these examples work and benefit the people / organizations involved? Is anyone put at risk? Why?
2.
a.
Check all your Facebook privacy settings.
Identify the settings that you changed because you are concerned about too much about you being disclosed. Barney Corwin - Smith 4
4/8/2012
Individual Assignment for 4/11/12
Building Your Own Web Page
a.
b. c.
This assignment is due before class on 4/11/12 Assignment is in PowerPoint for 4/4/12 Please include your honor pledge on your "top-most" web page
4/8/2012
Barney Corwin - Smith
5
Class Project
Grading Rubric for the Class (Team) Project Posted on BlackBoard Review of Rubric Discussion of Peer Review Survey
4/8/2012
Barney Corwin - Smith
6
Current Events Articles (Extra Credit)
Articles that discuss or demonstrate the impact of information technology or systems in an area of business of interest to you. Link to each article and a brief summary (about of single spaced page) on the course and section Discussion Board for Articles (in Blackboard).
Barney Corwin - Smith 7
4/8/2012
Class Topic Videos (Extra Credit)
At least 24 hours before we discuss a topic in class, propose a video to be shown in that class. Place the link and brief description of the video you propose on the Discussion Board. If the video is pertinent, and will enable further learning, you will receive extra credit when the video is cited on the topic's PowerPoint slides. 4/8/2012 Barney Corwin - Smith 8
Current Events Articles (Extra Credit)
Brief summary of the article and why you found it interesting (2-3 minutes). Include an explicit explanation of how the article relates to Information Systems and why it is relevant to your major.
4/8/2012
Barney Corwin - Smith
9
Current Events Articles (Extra Credit)
Articles that discuss or demonstrate the impact of information technology or systems in an area of business of interest to you. Link to each article and a brief summary (about of single spaced page) on the course and section Discussion Board for Articles (in Blackboard).
Barney Corwin - Smith 10
4/8/2012
Current Events Articles (Extra Credit)
Brief summary of the article and why you found it interesting (2-3 minutes). Include an explicit explanation of how the article relates to Information Systems and why it is relevant to your major.
4/8/2012
Barney Corwin - Smith
11
Ethics and Privacy
Introduction to Information Systems BMGT301 Session 20
SECTION 4.1 ETHICS
CHAPTER OVERVIEW
SECTION 4.1 Ethics
Information Ethics Developing Information Management Policies Ethics in the Workplace
4/8/2012
Barney Corwin - Smith
14
LEARNING OUTCOMES
Describe how computer ethics impact the use of information systems. Discuss the ethical concerns associated with information privacy, accuracy, property, and accessibility. Identify the six e-policies an organization should implement to protect themselves
Barney Corwin - Smith 15
1.
2.
3.
4/8/2012
What are Ethics?
4/8/2012
Barney Corwin - Smith
16
What are Ethics?
Well-founded standards of right and wrong that prescribe what humans ought to do Usually in terms of:
Rights Obligations Benefits to society Fairness Specific virtues
Barney Corwin - Smith 17
4/8/2012
What are Ethics?
Standards of behavior and thought that: 1. Impose the reasonable obligations to refrain from rape, stealing, murder, assault, slander, and fraud 2. Enjoin virtues of honesty, compassion, and loyalty 3. Relate to rights, such as right to life, right to freedom from injury, and right to privacy
4/8/2012 Barney Corwin - Smith 18
INFORMATION ETHICS Govern the ethical and moral issues arising from:
Development and use of information technologies Creation, collection, duplication, distribution, and processing of information itself
Barney Corwin - Smith 19
4/8/2012
INFORMATION ETHICS
Business issues related to information ethics
Intellectual property Copyright Pirated software Counterfeit software
4/8/2012
Barney Corwin - Smith
20
1 1
21
INFORMATION ETHICS
1986--Richard O. Mason article Most ethical debates relate to:
Information privacy 2. Information accuracy 3. Information property 4. Information 4/8/2012 accessibility Barney Corwin - Smith
1.
INFORMATION ETHICS
Privacy is a major ethical issue
1.
The right to be left alone when you want to be The right to have control over your own personal possessions The right not to be observed without your consent
2.
3.
4/8/2012
Barney Corwin - Smith
22
INFORMATION ETHICS
Confidentiality The assurance that messages and information are available only to those who are authorized to view them
4/8/2012
Barney Corwin - Smith
23
INFORMATION ETHICS
People are the only ethical and unethical component of an Information System 1. Individuals copy, use , and distribute software without proper licenses 2. Search organizational databases for sensitive and personal information 3. Individuals create and spread viruses 4. Individuals hack into computer systems to steal information 5. Employees destroy and steal information
4/8/2012 Barney Corwin - Smith 24
INFORMATION SYSTEMS DO NOT HAVE ETHICS, PEOPLE DO
An information system:
Does not care how it is used Will not stop itself from sending spam, viruses, or highly-sensitive information
4/8/2012
Barney Corwin - Smith
25
INFORMATION SYSTEMS DO NOT HAVE ETHICS, PEOPLE DO Tools to prevent information misuse
1. 2. 3. 4.
Information management Information governance Information compliance E-discovery
4/8/2012
Barney Corwin - Smith
26
DEVELOPING INFORMATION MANAGEMENT POLICIES
Organizations strive to build an ethical corporate culture Based on ethical principles That employees can understand and implement
4/8/2012
Barney Corwin - Smith
27
DEVELOPING INFORMATION MANAGEMENT POLICIES
4/8/2012
Barney Corwin - Smith
28
ETHICAL COMPUTER USE POLICY
Contains general principles to guide computer user behavior Ensures all users are informed of the rules By agreeing to use the system on that basis, users consent to abide by the rules
4/8/2012
Barney Corwin - Smith
29
Small Group Discussion and Debate
Resolved: "The University of Maryland should create and enforce an ethical computer / information system use policy for all that use the UMD network (wi-fi included).
4/8/2012
Barney Corwin - Smith
30
INFORMATION PRIVACY POLICY
Contains general principles regarding information privacy Unethical use of information typically occurs "unintentionally" when it is used for new purposes
4/8/2012
Barney Corwin - Smith
31
ACCEPTABLE USE POLICY (AUP)
Requires a user to agree to follow it before being provided access to corporate email, information systems, and the Internet Nonrepudiation A contractual stipulation to ensure that e-business participants do not deny their online actions Internet use policy Contains general principles to guide the proper use of the Internet
4/8/2012
Barney Corwin - Smith
32
EMAIL PRIVACY POLICY
Details the extent to which email messages may be read by others Organizations can mitigate the risks of email and instant messaging communication tools by implementing and adhering to an email privacy policy
4/8/2012
Barney Corwin - Smith
33
EMAIL IS ON MULTIPLE COMPUTERS
4/8/2012
Barney Corwin Smith
34
EMAIL - PRIVACY POLICY
Spam Unsolicited email Anti-spam policy Simply states that email users will not send unsolicited emails (or spam)
4/8/2012
Barney Corwin - Smith
35
SOCIAL MEDIA POLICY
Social media policy Outlines the corporate guidelines or principles governing employee online communications
4/8/2012
Barney Corwin - Smith
36
WORKPLACE MONITORING POLICY
Workplace monitoring is a concern for many employees Organizations can be held financially responsible for their employees' actions
4/8/2012
Barney Corwin - Smith
37
WORKPLACE MONITORING POLICY
Dilemma:
An organization is placing itself at risk if it fails to monitor its employees Some people feel that monitoring employees is unethical
4/8/2012
Barney Corwin - Smith
38
WORKPLACE MONITORING POLICY
Information technology monitoring Tracks people's activities by:
Number of keystrokes Error rate Number of transactions processed
Employee monitoring policy Explicitly state how, when, and where the company monitors its employees
Barney Corwin - Smith 39
4/8/2012
Internet Monitoring Technologies
1. 2. 3. 4. 5. 6. 7.
Web traffic monitoring Key logger or key trapper software Hardware key logger Screen scraper Web log (per user) Cookies Clickstream
Visits, views, actions
Barney Corwin - Smith 40
4/8/2012
1 1
41
Information Privacy
What information should you have to reveal? Information you might want to keep private:
Social security number Medical history Family history Religion Fastest growing "information" crime Biometrics for better protection
Barney Corwin - Smith
Identity theft
4/8/2012
1 1
42
Information Privacy (cont'd)
Companies seem to know about our every move--how much information do we need to reveal? Amazon.com is famous for personalization Facebook knows all! What are the costs?
To us? To our families? To our friends? To our community?
Barney Corwin - Smith
4/8/2012
Small Group Discussion Then Vote
I can trust Facebook to protect my privacy
4/8/2012
Barney Corwin - Smith
43
1 1
44
Identity Theft
Fastest growing "information crime" Stealing another person's:
Credit card number Social Security number Health Insurance information Other personal information
Results in losses, bad credit for victim or fraudulent health insurance claims
4/8/2012 Barney Corwin - Smith
1 1
45
1.
How to Maintain Your Privacy Online
Review privacy policy of the company with which you are transacting Policy should indicate:
2.
What information is being gathered about you How seller will use this information Whether and how you can "opt out" of these practices Choose Web sites monitored by independent organizations Avoid having cookies left on your machine (Ccleaner) Visit sites anonymously (Anonymous browsing) Use caution when confirmation e-mail is requested
Barney Corwin - Smith
3.
Additional tips:
4/8/2012
1 1
46
1.
2.
Can you trust the web site and the website owner? The web site's advertisers?
How to Maintain Your Privacy Online
4/8/2012
Barney Corwin - Smith
1 1
47
Information Accuracy
Ensuring authenticity and fidelity of information High costs of incorrect information
Banks
Schools and colleges
Hospitals
Difficult to track down person who made the mistake
4/8/2012 Barney Corwin - Smith
1 1
48
Privacy of Information
Who owns information about individuals? How can this information be sold and exchanged? History of information sharing about individuals
4/8/2012 Barney Corwin - Smith
1 1
49
Data Privacy Statements
Company maintaining the database with customer information: o Cannot sell information it legally owns it agreed not to share o Is free to proper data Must insure sell it
handling practices
4/8/2012
Barney Corwin - Smith
1 1
50
Spam, Cookies, and Spyware
Spam Unsolicited e-mail CAN-SPAM Act of 2003 Little protection available Cookies Text file storing Web browsing activity Can opt for cookies not to be stored Web sites might not function properly without cookies Spyware Software used for data collection without the users' knowledge Unlikely this activity will become illegal anytime 4/8/2012 Barney Corwin - Smith soon
1 1
51
Information Accessibility
Who has the right to monitor the information? Example: e-mail capture by Carnivore
4/8/2012
Barney Corwin - Smith
1 1
52
Carnivore
Developed by the government to monitor all cyber communicati on In 2005 FBI abandoned Carnivore for 4/8/2012 commercially Barney Corwin - Smith
How to Protect Your Intellectual Property Online?
4/8/2012
Barney Corwin - Smith
53
1 1
54
DRM Technology solution to control digital content
Digital Rights Management (DRM)
Music, movies, books, and so on
Some critics, "digital restriction management" Digital watermarking
Electronic version of physical watermarks
http://www.adobe.com/manufacturing/resources/drm/
4/8/2012
Barney Corwin - Smith
1 1
55
Need for a Code of Ethical Conduct
Many businesses have guidelines for appropriate use Universities endorse guidelines proposed by EduCom
4/8/2012
Barney Corwin - Smith
1 1
56
Need for a Code of Ethical Conduct (cont'd) Responsible computer use (based on work of the Computer Ethics Institute)
prohibits: 1. Using a computer to harm others 2. Interfering with other people's computer work 3. Snooping in other people's files 7. Using a computer to steal
4/8/2012 Barney Corwin - Smith
1 1
57
Need for a Code of Ethical Conduct (cont'd)
Responsible computer use (based on work
of the Computer Ethics Institute)
prohibits: 5. Using a computer to bear false witness 6. Copying or using proprietary software without paying for it 7. Using other people's computer resources without authorization 8. Appropriating other people's 4/8/2012 Barney Corwin - Smith intellectual output
1 1
58
Internet Hoaxes
False messages circulated online
New viruses (that don't exist)
2004 e-mail told recipients to erase a file that was actually a part of Windows operating system Cancer causes Spammers harvesting e-mail addresses from hoaxes
Collection of funds for certain group
Possible consequences
4/8/2012
Barney Corwin - Smith
1 1
59
Cyber Harassment
Broadly refers to use of a computer to communicate obscene, pejorative, libelous, or threatening content
4/8/2012
Barney Corwin - Smith
1 1
60
Cyber Stalking
Making false accusations that damage reputation Gaining information on a victim by monitoring online activates Using Internet to encouraging others to harass a victim Attacking data and equipment of a victim Using the Internet to place false goods or orders
Barney Corwin - Smith
4/8/2012
1 1
61
Cyber Bullying
Cyber bullying
The deliberate cause of emotional distress to a victim
http://www.isafe.org/imgs/pdf/education/CyberBullying.pdf
Online predator
Typically target vulnerable population for sexual or financial purposes
http://www.microsoft.com Online predators
4/8/2012
Barney Corwin - Smith
Read the three articles posted under Course Documents on the 0501,0601 BlackBoard site for Ethics and Privacy. In 500 words or less, answer these 3 questions concerning Information Systems Ethics and Privacy, using the ideas in Baltzan and today's lecture. 1. Do you consider Facebook to be an ethical company? Why? 2. Does Facebook Corwin - Smith much about your 4/8/2012 Barney care as 62
Individual Assignment for 4/16/12
Individual Homework Due 4/11
Building Your Own Web Page
a.
b. c.
This assignment is due before class on 4/11/12 Assignment details are on 4/4/12 slides Please include your honor pledge on your "top-most" web page
4/7/2010
Barney Corwin - Smith
63
What's Next?
Wednesday 4/11/12
Understanding Software: A Primer for Managers (Gallaugher Chapter 9) Individual Homework Due: Your Personal Website TechFest at 5:30 PM (pre-registration available) Software in Flux: Partly Cloudy and Sometimes ...(Gallaugher Chapter 10) Individual Homework Due: of Business Barney Corwin - Smith School
q IT
Next Monday 4/16/12
4/8/2012
64
Ethics and Privacy
Three Minute Paper
Your Ticket to Leave
On one sheet of paper:
1.
2.
3.
Describe what you consider to be the key points we discussed in class today Describe the main questions you still have about what we discussed in class today Describe what you liked and didn't like about today's class
5/2/12
(Optional) put your name (last name first) in the upper left hand side of the paper
Barney Corwin - Smith 65