Legal Issues in Information Security

A4 – The Sarbanes-Oxley Act (SOX) The Sarbanes-Oxley Act (SOX) was enacted in 2002 as a result of a series of fraudulent financial scandals involving publicly traded companies. SOX was created to help protect shareholders, employees, and the public from accounting errors and fraudulent financial practices. The act is comprised of eleven key sections that define rules for corporate financial reporting, corporate governance as it pertains to financial information handling, financial records kee...

A1. Examples of Criminal Activity- CFAA and ECPA 1. CFAA: Application Division Head Carl Jaspers, requested two accounts be created. These accounts were assigned to former employees that had not worked at TechFite for more than a year. These accounts were used to gain access to divisions they did not have permission to by escalation of privilege. These other departments included Legal, Human Resources (HR), and Finance. 2. ECPA: The Business Intelligence (BI) Unit used the Metasploit tool to ...

A1. Examples of Criminal Activity- CFAA and ECPA 1. CFAA: Application Division Head Carl Jaspers, requested two accounts be created. These accounts were assigned to former employees that had not worked at TechFite for more than a year. These accounts were used to gain access to divisions they did not have permission to by escalation of privilege. These other departments included Legal, Human Resources (HR), and Finance. 2. ECPA: The Business Intelligence (BI) Unit used the Metasploit tool to ...