Devious And Liability Under Computer Misuse Act

The nature of this event describes an internal breach of security in order to access and manipulate sensitive data. This internal breach was caught by the auditor, but the communications from the auditor to those who’s data was breached was intercepted.

This act was introduced to prevent users hacking. This also stops them entering a computer, programs or files without authorisation, this act is in place to prevent users to use the internet without permission to cause an act of crime and also prevents unauthorised modifications to a computer. This act does not allow any attacks on a server as this is illegal.

Line (1) proposes that since Hack’s intrusion into the patient database is done purely for her own amusement, that of gauging her skills, and not for ill purposes, it is not morally wrong. Furthermore, the intrusion caused no harm to anyone as Hack did not read, alter, or save any part of the database. She left the security settings of the database and its contents as is. No one was aware of her intrusion nor will anyone find out.

A1. The Nature of the incident was that an employee was able to hack into the computer system and gain access to the financial payroll system, human resources and even email system. This employee used several methods in order to gain access into the system: IP spoofing, Data modification, Man in the middle attack and compromised-key attack. As a result the employee was able to tamper with payroll system. An auditor discovered the discrepancies and tried to make upper management aware of the situation through email, but the email was intercepted by the hacker. The hacker impersonated an employee and persuaded the auditor into granting him more access into the system which resulted in additional sabotage into the payroll system. Hacker

The same starting information will be accessed by PC from the memory gadget, the recovery of the information will be automatic and the speed of recovery will be a few times faster than that of the manual systems. The movement of the information in the accounting system is the first step, however, movement of information is not the catalyst for business opportunities; supplanting the system obliges customization as per the new system, nevertheless, the current information additionally should be moved into new system (Castle, 2008). The movement of the information does not bring new opportunities as it is expected after the computerization of the accounting systems. The new system will have distinctive risks, and the prerequisites will be diverse for the information operations and recovery. The inside controls will be distinctive, and the regulations will be diverse. The recovery of the information turns out to be simple and snappy due to the modernized systems. However, it has the dangers identified with the utilization of information for the reason other than that for which it was gathered. An employee is not supposed to use confidential information of other employees, and therefore confidentiality must be up held. Personal information should be kept classified and utilized just for the planned reason. The information assurance acts have confined the entrance of information by an unauthorized

· Microsoft permitted the employee to have a “personal folder” on their PC, but the employer and employee had access to passwords to gain only access to the

From the Requirements for the Corporate Computing Function, the fifth computing facility fulfillment point reads, “Meet information requirements of management” (Stallings, 2009, p. 58). Stated in another way, this Chief Information Officer’s (CIO) mission statement’s component implies that company information can be utilized by management for a great deal of things. While the security of all company-owned data is immensely important to the success of the organization, some of the information carries significant value when used by

In 1996, Expanded taking information offense to all federal computer systems. Expanded taking information offense to all private computer systems in interstate or foreign commerce. Expanded taking classified information offense by eliminating intent to use element. Expanded tampering offense to negligent conduct. Added offense for extortion by threat of damage. Added definition of “damage.”

* Would the Computer Fraud and Abuse Act apply to Shumaster’s use of Dracca’s computer to email misappropriated trade secrets to a competitor? Rely on legal principles and case law from this week’s reading to support your conclusion.

In this essay I will be talking about the key guidelines when it comes to investigating computer related crimes, such as what kind of the sections and sub-sections the offence falls under when regarding the ‘law’. I will also analyse the principle that will apply when dealing with the collection data using the digital forensic unit to analyse the data, more so how this is used to make accurate judgment on why the data was in this location and what its purpose or intended use was. Furthermore I will address what kind the authority the ACPO are granted, and further dissect the responsibilities the chief commissioner has. Lastly I will be addressing one the biggest computer related crimes which Cyber Crime and how ACPO created a method for dealing with such crimes, such as dividing the crime into two different categories of Cyber Crime, and how they differ from one another.

For an organization to safeguard its computer network it has to take computer security seriously and put it as one of its top priorities so as to ensure that vital services are available for it to operate. Furthermore, computer security requires the involvement of all the stakeholders through the sharing of information and collaborating in designing new ways of deterring attackers. Prosecution of offenders is a big challenge due to the nature of computer crime versus the set standard of evidence, as noted by McCusker (2007) ‘Contentions have appeared concerning whether such online crime can be classified into our general criminal justice framework, due to the shortfall in accessible examination materials which help or contradict either contention’.

This law is the most fundamental laws in computer crimes. It was designed to provide protection against computer based crimes. The increase in computer crimes led to the establishment and passing of this law. The law specifically addresses any unauthorized access and the use of computer networks or computers (W. C. Easttom & Taylor, 2011). Passing this law ensured that anyone accessing classified information held within a computer without authorization was liable of a criminal offence. The society has been forced to respect and avoid accessing any information that is not theirs or they are legally authorized to access. This protects the government from hackers and spies who have the intention of accessing confidential information for malicious purposes. Restricting and criminalizing the access of information has allowed companies to confidently use computer systems for the storage of the data and information.

This policy complies with the Computer Misuse Act (1990) which was an act made to secure computer systems and networks from unapproved access. By complying with legal obligation, Blyth’s Books can pursue legal or disciplinary action against anyone (employee or otherwise) guilty of breaching their systems.

All crimes come in different forms. Computer-related crimes are no different (“Most common schemes: Identity crimes,” 2009). In some computer-based crimes, a computer is used to commit the crime, such as in copyright infringement and illegal file-sharing cases (Volonino, Anzaldua & Godwin, 2007, p. 67). To best investigate these crimes, an investigator must understand how to “preserve and authenticate” all electronic evidence that pertains to the case (Volonino, Anzaldua & Godwin, 2007, p. 67). This training manual will provide an overview of copyright infringement and illegal file-sharing crimes, as well as explain how to conduct a seizure and search of evidence. In addition, the manual addresses investigative concerns related to these cases.

As a future information security professional, you must understand the scope of an organization’s legal and ethical responsibilities. The information security professional plays an important role in an organization’s approach to managing liability for privacy and security risks. In the modern litigious societies of the world, sometimes laws are enforced in civil courts, where large damages can be awarded to plaintiffs who bring suits against organizations. Sometimes these damages are punitive assessed as a deterrent. To minimize liability and reduce risks from electronic and physical threats, and to reduce all losses from legal action, information security practitioners must thoroughly understand the current legal environment, stay current with laws and regulations, and watch for new and emerging issues. By educating the management and employees of an organization on their legal and ethical obligations and the proper use of information technology and information security, security professionals can help keep an organization focused on its primary objectives. In the first part of this chapter, you learn about the legislation and regulations that affect the management of information in an organization. In the second part, you learn about the ethical issues related to information security, and about several professional organizations with established codes of ethics. Use this chapter as both a reference to the legal aspects of information security and as an aide