Legal and Ethical Recommendations Brief

Overview

Data security and data privacy protection are key aspects of the cybersecurity domain. To address the concerns of data security and privacy, a practitioner must account for a number of competing drivers, including regulatory compliance, operational impact, cost, as well as customer and employee satisfaction. As a practitioner, you will be called upon to identify requirements and make recommendations for technology-, policy-, and workforce-related approaches to ensure that appropriate measures are in place to adequately secure data and protect individual privacy in a constantly changing threat environment. In this project, you will recommend an approach to address the legal and ethical aspects of a security-relevant business decision.

In this assignment, you will demonstrate your mastery of the following course competency:

Make recommendations regarding legal and ethical issues in cybersecurity appropriate for the organizational environment

Scenario

• Your instructor will provide you with the specific scenario for this project in an announcement. This scenario places you back in the role of an executive-level security consultant for the organization. The scenario will provide you additional details surrounding the organization’s decisions on the proposal you addressed in Project One. To complete this task, you will prepare a legal and ethical recommendation brief for the internal stakeholder board in order to identify an approach to meeting the privacy protection, data security, and ethical needs of the scenario.

Prompt

Write a brief memorandum to the internal leadership board outlining your recommendations for meeting the needs of the scenario. You must address the critical elements listed below. The codes shown in brackets indicate the course competency to which each critical element is aligned.

Recommend an approach to protecting data privacy. Support your recommendation with evidence from applicable laws or the corporate mission and values.

Recommend an approach to ensuring data security.Support your recommendation with evidence from applicable laws or the corporate mission and values.

Describe how ethical considerations about data use influenced your recommendations for security-enhancing safeguards