Social and Professional Issues in IT

Course Manual: Social and Professional Issues in Information Technology

• This course examines the social impact, implications, and effects of computers.
• It covers the responsibilities of computer professionals in developing and managing information systems.
• Specific topics include the history of computing, computer applications, their impact, the computing profession, legal and ethical responsibilities of professionals, and career paths in computing.

Course Table of Contents

• Topic 1: Orientation
• Topic 2: Overview of Ethics
• Topic 3: Ethics for IT Workers and Users
• Topic 4: Cyberattacks and Cybersecurity
• Topic 5: Privacy
• Topic 6: Freedom of Expression
• Topic 7: Intellectual Property
• Topic 8: Ethical Decision-Making in Systems Development
• Topic 9: Impact of Information Technology on Society
• Topic 10: Social Media
• Topic 11: Ethics of IT Organizations

Lesson 3: Cyberattacks and Cybersecurity

• Learning Outcomes:
  • Understanding factors contributing to computer incidents and their effects.
  • Implementing a robust security program to prevent cyberattacks.
  • Actions to take in case of a successful security intrusion.

Learning Objectives (Lesson 3)

• Why are computer incidents prevalent, and what are their effects?
• Steps to implement a strong security program to prevent cyberattacks.
• Actions required in response to successful security intrusions.

The Threat Landscape (Lesson 3)

• IT security involves complex trade-offs.
• Consider the effort and cost needed to safeguard against computer crime.
• Evaluate difficulty and cost increases for security measures.
• Explore options if a firm becomes a victim of cybercrime (prosecution, low profile, customer notification, other actions.)

Why Computer Incidents Are So Prevalent (Lesson 3)

• Increasing complexity increases vulnerability.
• Expanding network entry points increase security risks.
• Changes and expansion of IT systems introduce new risks.
• Maintaining technology, performing ongoing assessments, and responding to new threats are important for IT organizations.
• Employee use of personal devices (BYOD) introduces access control considerations and risks.

Classifying Perpetrators of Computer Crime (Lesson 3)

• Black hat hacker: Violates computer/Internet security maliciously or for illegal personal gain.
• Cracker: Causes problems, steals data, corrupts systems.
• Malicious insider: An employee or contractor targeting financial gain or system disruption.
• Industrial spy: Steals trade secrets for unfair competitive advantage.
• Cybercriminal: Attacks systems for financial gain.
• Hacktivist: Uses attacks to promote a political ideology.
• Cyberterrorist: Targets government infrastructure, financial institutions, and other critical assets for harmful purposes.

Types of Exploits (Lesson 3)

• Ransomware: Malware stopping computer use or data access unless a ransom is paid.
• Virus: Disguised programming code causing unexpected/undesirable behavior.
• Worm: Harmful program in active memory, self-replicating.
• Trojan horse: Program with hidden malicious code.
• Logic bomb: Code that executes at a specific time or event.
• Blended threat: Combines virus, worm, Trojan activities.
• Spam: Unsolicited email sent to large numbers.
• CAN-SPAM Act: Regulates spam practices.
• CAPTCHA: Test to distinguish humans from computers.

This quiz explores the key social and professional issues related to information technology, including ethics, cybersecurity, and privacy. It also examines the responsibilities of IT professionals in today's digital landscape. Test your understanding of the implications of technology on society and ethical decision-making in computing.