Information security professionals are sometimes involved in communications that
ID: 334076 • Letter: I
Question
Information security professionals are sometimes involved in communications that are confidential. These communications might be a component of a criminal investigation or a policy violation within the organization. It might also be communication of policy or procedural changes that need to be vetted and approved by senior management before being announced to the rank and file of the organization. Discuss an example of an information-security-related communication that might occur within the area of interest you covered in your research paper. Include in the discussion the legal and ethical implications of violating the confidentiality of the communication described in your example.
Explanation / Answer
Let us take an interest area of M&A ( Mergers & Acquisitions)
During the due diligence time of M&A a lot of communication happens between the two entity which are otherwise un related. Many important data gets shared thru e-mail or other form of communication.
During this course of time it is very important to maintain the
Confidentiality of information being shared. As this kind of data can be used for any inappropriate use.
This is responsibility of every employee to maintain the utmost confidentiality of these information. Violating the confidentiality clause can have legal as well as ethical implication as every employee of an organization is have singed the business code of conduct wherein they have agreed, read and understood that it is not ethical as well as legally allowed to share any information with the person who is not intended to share.
If the brach of such conducted is proven then it will have ethical as well as legal implication for people involved in such transaction.